Building a trusted computing base
Privilege Elevation - the problems of setUID programs and services
94.
A simple example