A linux security module that restricts program capabilities to protect against: