Hacker News new | ask | show | jobs
by tetha 3026 days ago
You can do so with SELinux btw. You can remove the right for a program to run the exec syscall.

It's just sad that there is no really good tutorial how to write your own SELinux modules for your own applications. It's easier than it seems and allows some really powerful security measures.

1 comments

Maybe you could write one? I bet that it would be really appreciated.