Building a trusted computing base
GRID Examples with small setuid programs