[PATCH 00/20] Prevent "nobody" from escalating privileges by using writeable binaries as a vehicle