Introduction

Adversaries often escalate privileges by abusing setuid or setgid applications.

Such applications are executed with special privileges by the operating system.

Although often necessary, the setuid model is too coarse grained.

Leverage sandboxing approach to provide fine-grained elevated privileges.