zlacker

>>rbanff+(OP)
I genuinely can't think of anything else I'd rather use less than this.

I think MAC (Mandatory Access Control) applied to a desktop environment, picking a better language than C and actually thinking about stuff is more than sufficient to get around the existing problems...

Virtualization is just another pile of complexity and performance problems to deal with. It's not a magic bullet. Consider the following as well:

http://www.c0t0d0s0.org/archives/3651-Theo-de-Raadt-about-vi...

I really don't want this solution.

>>eckypt+Ur
I will reserve judgement until I've given it a try. It might not be the ideal solution, but it looks like a nice stop-gap solution.