compartment | Confine services in a limited environment | Mehr ...
Compartment was designed to allow safe execution of privileged and/or untrusted executables and services. It has got all possible features included, which can be used to minimize the risk of a trojanized or vulnerable program/service.