Privelege Separation

Creating a privsep user:

 mkdir /var/empty
 chown root:sys /var/empty      
 chmod 755 /var/empty
 groupadd bogus
 useradd -g bogus -c 'bogus privsep' -d /var/empty -s /bin/false bogus