On Monday, 16 September 2013 at 19:59:06 UTC, Johannes Pfau wrote: > Thats what selinux or other MACs are for. No need to set up > more user accounts, just limit the application's permissions. I've found selinux to be pretty hard to use with what little I've done with it... user accounts are simple.