Limits filesystem visibility and access for any dynamically linked program - View it on GitHub