A Linux kernel security module that enables applications to limit their own privileges.