It might be a idea to run any child process in a [chroot jail][1] chroot jail to resolve some of the security aspects.


  [1]: https://unix.stackexchange.com/questions/105/chroot-jail-what-is-it-and-how-do-i-use-it