That sounds a lot like the securelevel [1] features the BSDs have. A coarse-grained system that locks a system down with progressively stronger and stronger con

That sounds a lot like the securelevel [1] features the BSDs have. A coarse-grained system that locks a system down with progressively stronger and stronger controls. There have been occasional discussions on the kernel mailing list on adding such a feature, but at the moment, Linus prefers the capabilities system. A shame, really, because having something to disable activities that people wouldn't do in a production system would be useful in a lot of circumstances. [1] http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man7/securelevel.7?query=securelevel&sec=7 http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man7/...