sbox is a CGI wrapper script that allows Web site
hosting services to safely grant CGI authoring
privileges to untrusted clients. In addition to
changing the process privileges of client scripts
to match their owners, it goes beyond other
wrappers by placing configurable ceilings on
script resource usage, avoiding unintentional and
intentional denial of service attacks. It also
optionally allows the Webmaster to place clients'
CGI scripts in a chroot'ed shell restricted to the
author's home directories.