eGuard

An eBPF-based tool for Linux to restrict certain actions by the user like creating files inside a given directory or executing a particular program.