Patent ID: 7707620

Claim:
A method of securing executables and processes comprising: providing a mechanism to track and control operations for files having setuid/gid permissions and processes having setuid/gid privileges; defining a policy rule controlling said operations on said files and said processes; and using said policy rule to control operations involving said files and said processes; wherein using said policy rule to control operations involving said files and said processes comprises: receiving an operation communication associated with a setuid/gid property, the operation communication targeting at least one of the files having setuid/gid permissions and the processes having setuid/gid privileges: prior to allowing the operation communication to target the at least one of the files having setuid/gid permissions and the processes having setuid/gid privileges, triggering a rule associated with the operation communication in response to receiving the operation communication, the rule configured to control access to the at least one of the files having setuid/gid permissions and the processes having setuid/gid privileges; and based on the rule associated with the operation communication, either allowing the operation communication to target the at least one of the files having setuid/gid permissions and the processes having setuid/gid privileges or disallowing the operation communication to target the at least one of the files having setuid/gid permissions and the processes having setuid/gid privileges.