Run a network service at low privilege level and restricted file system access
ftp://ftp.porcupine.org/pub/security/index.html
Packages