Lock down a Linux WS