Preventing a process from writing to disk
Does anyone know if linux (or any other unix) offers a way to prevent a particular process from writing to disk? This might be useful in a situation where you don't want your system to be compromised even if there is a buffer overflow vulnerability in a program - you can be sure that the attacker can't modify your system by exploiting the vulnerability.
