Systrace

Manages policies for different applications.
Policy is installed after successful call to execve.
User configured policy in $HOME/.systrace.
Global policies in /etc/systrace/.

Directory structure is flat:
bin_ls
bin_rm
emul_linux_usr_local_lib_opera_5_05_tp1_opera_static
[...]
usr_local_bin_irssi
usr_local_bin_konq_e
usr_local_bin_mplayer
[...]