Hacker News new | ask | show | jobs
by formerly_proven 495 days ago
SELinux exists for precisely these scenarios, use it.