A preload (sandbox) library to restrict filesystem writes
