Systrace topic

Systrace is a computer security utility which limits an application's access to the system by enforcing access policies for system call. This can mitigate the effects of buffer overflow and other security vulnerabilities. It was developed by Niels Provos and runs on various Unix-like operating system. Systrace is particularly useful when running untrusted or binary-only applications and provides facilities for privilege elevation on a system call basis, helping to eliminate the need for... full article at wikipedia