How to disable application run

Ilya Guterman <[email protected]> Tue, 4 Oct 2016 14:33:27 +0300

Newsgroups	org.kernel.vger.linux-c-programming
Message-ID	<CAMraO6_rYr5ArwSw6M22vmQXe-jCfiqRRn8_EGSgXMYnTYMYkw@mail.gmail.com>

Hey CiN,

You can write LKM which overrides the execve syscall and checks
wherever the filename is blacklisted, but overriding syscall is
considered bad.
Maybe there is a better solution I am not aware of.

Regards amfern.