You could block it's network access with network namespaces: http://man7.org/linux/man-pages/man1/unshare.1.html http://man7.org/linux/man-pages/man1/unshare.1.

You could block it's network access with network namespaces: http://man7.org/linux/man-pages/man1/unshare.1.html http://man7.org/linux/man-pages/man1/unshare.1.html I'm sure you could engineering something to kill it also with currently kernel functionality - though I would need to do more research to say what.