Text this: Hardening linux processes : extending Grsecurity to integrate system call filters and namespaces