A Study of Application Sandbox Policies in Linux