On Monday, 16 September 2013 at 19:59:06 UTC, Johannes Pfau wrote:
Thats what selinux or other MACs are for. No need to set up more user accounts, just limit the application's permissions.
I've found selinux to be pretty hard to use with what little I've done with it... user accounts are simple.
