Hacker News new | ask | show | jobs
by chrismarlow9 1403 days ago
Sounds like you might like apparmor

https://debian-handbook.info/browse/stable/sect.apparmor.htm...

Also worth looking into is seccomp profiles, although that's a bit different but useful for containers and securing your own code where the attack surface might be massive or you may be running untrusted code. Think trying to secure things like online language "playgrounds" from server side exploitation.