A C++ library that simplifies implementation of process isolation and privilege separation - View it on GitHub