I need something like a firewall, but instead of restricting network traffic, I want to be able to restrict scripts, applications, and processes in general from being allowed to run/execute in the first place.
Rather than having to constantly keep checking for rogue processes, troubleshooting, and terminating them individually. I just want them to:
a) Die. Quickly, quietly, without manual user intervention.
Or (preferably):
b) Be prevented from ever spawning in the first place.
PS: I don't think the old chmod
utility is really appropriate at this level. I think I recall reading about an Apple style .plist
/.xml
solution for this kind of thing. I don't know enough about it to say if it's the right approach though.