A high level ACL abstraction on top of the linux kernel that allows for behavior driven security development life cycles to securely
One Ring-0 to rule them all, One Ring-0 to find them, One Ring-0 to bring them all, and in the darkness bind them.
confine processes into a well defined execution context.