I was just researching these a little while ago and hadn't heard of Tomoyo. Turns out it is included in the mainline kernel and is pretty simple to use. http:/

I was just researching these a little while ago and hadn't heard of Tomoyo. Turns out it is included in the mainline kernel and is pretty simple to use. http://tomoyo.osdn.jp/ http://tomoyo.osdn.jp/ On debian you just need to enable it via a kernel param and install tomoyo-tools to get going.