yakse

YAKSE (Yet Another Kernel Security Engine) is an open source security project for GNU/Linux (Kernel 2.6 series), which uses a "white list" approach to control program execution at the kernel level.

It's an easy way to prevent users running malicious or unwanted applications. As an example, if your machine is running a vulnerable software, nobody will be able to use an exploit against this application because the exploit will not be allowed to be executed.