> Could someone advise me the best way to constrain an application from > performing unwanted activities? (e.g. if someone in an irc chan was able to > hijack my irssi app to read personal files).
The ultimate containment vessel is a Zone. Build a zone with just the files you want in it RO if you want and have at it. I suspect the app won't know the difference and it can't escape. Gary..