I would look into the Chrome/Chromium sandbox code, as they seem to have at leas...

		vidarh on July 19, 2015 \| parent \| context \| favorite \| on: A subsystem to restrict programs into a “reduced f... I would look into the Chrome/Chromium sandbox code, as they seem to have at least some facility for parsing simple profiles. This page has some details: http://www.chromium.org/chromium-os/developer-guide/chromium...