---

%PDF-1.4 %���� 9 0 obj << /S /GoTo /D (Outline0.1) >> endobj 12 0 obj (Introduction) endobj 13 0 obj << /S /GoTo /D (Outline0.2) >> endobj 16 0 obj (Privileges in Linux) endobj 17 0 obj << /S /GoTo /D (Outline0.2.1.7) >> endobj 20 0 obj (Process and Privileges) endobj 21 0 obj << /S /GoTo /D (Outline0.2.2.11) >> endobj 24 0 obj (Privilege-related Facilities) endobj 25 0 obj << /S /GoTo /D (Outline0.3) >> endobj 28 0 obj (Writing Good Code) endobj 29 0 obj << /S /GoTo /D (Outline0.3.1.23) >> endobj 32 0 obj (Preventing Common Security Flaws) endobj 33 0 obj << /S /GoTo /D (Outline0.3.2.27) >> endobj 36 0 obj (Privilege Separation) endobj 37 0 obj << /S /GoTo /D (Outline0.3.3.32) >> endobj 40 0 obj (Trust Relationships) endobj 41 0 obj << /S /GoTo /D (Outline0.3.4.38) >> endobj 44 0 obj (Update Strategy) endobj 45 0 obj << /S /GoTo /D (Outline0.4) >> endobj 48 0 obj (Sandbox designs) endobj 49 0 obj << /S /GoTo /D (Outline0.4.1.40) >> endobj 52 0 obj (Sandboxing Definition) endobj 53 0 obj << /S /GoTo /D (Outline0.4.2.44) >> endobj 56 0 obj (ptrace\(\), setuid and SECCOMP sandboxes) endobj 57 0 obj << /S /GoTo /D (Outline0.4.3.75) >> endobj 60 0 obj (Other approaches) endobj 61 0 obj << /S /GoTo /D (Outline0.4.4.79) >> endobj 64 0 obj (Attack surface evaluation) endobj 65 0 obj << /S /GoTo /D (Outline1) >> endobj 68 0 obj (Appendix) endobj 69 0 obj << /S /GoTo /D (Outline1.5) >> endobj 72 0 obj (Appendix) endobj 73 0 obj << /S /GoTo /D [74 0 R /Fit ] >> endobj 113 0 obj << /Length 1623 /Filter /FlateDecode >> stream x��YYo7~���ti�K��I\-Z���AYK�����3�w�rl�M����᜜�F����#69��@aDA��D��ra�՜,����

---