> Could someone advise me the best way to constrain an application from 
> performing unwanted activities? (e.g. if someone in an irc chan was able to 
> hijack my irssi app to read personal files).

        The ultimate containment vessel is a Zone.  Build a zone with just
        the files you want in it RO if you want and have at it.  I suspect
        the app won't know the difference and it can't escape.

Gary..

Reply via email to