fsshield

Description: Limit a new process's access to the filesystem
Status: Complete
Source: https://git.maandree.se/fsshield
Latest release: 1.0
License: ISC License (Internet Systems Consortium license)
Written in: C (ISO C99)

fsshield starts a selected program, but limits it's access to the filesystem. By default it gives read-only access to some fundamental directories and /etc/passwd, access to the current working directory, and clean tmpfs mounts on /tmp and /var/tmp.