External links

Fd based least priviledge

• Plash
• Adam Langley's paper A Practical UNIX Capability System

OS support for capability based POLA

• Capsicum: A capability based POLA extention to the POSIX API for the FreeBSD platform.

Static least priviledge server implementations

• The Cduck distributed URL cloacking kit

Language based least authority

• The E Language
• Joe-E: an object capability subset of Java.

Discussion & People

• The cap-talk mailinglist
• POLA group at LinkedIn