Sounds like you might like apparmor https://debian-handbook.info/browse/stable/sect.apparmor.html https://debian-handbook.info/browse/stable/sect.apparmor.htm.

Sounds like you might like apparmor https://debian-handbook.info/browse/stable/sect.apparmor.html https://debian-handbook.info/browse/stable/sect.apparmor.htm... Also worth looking into is seccomp profiles, although that's a bit different but useful for containers and securing your own code where the attack surface might be massive or you may be running untrusted code. Think trying to secure things like online language "playgrounds" from server side exploitation.