Restrict access to /proc