Sandboxing

sandbox-exec - deprecated

examples - /usr/share/sandbox and /System/Library/Sandbox/Profiles/
TinySCHEME

asctl - App sandbox control tool

App Sandbox Design Guide