Fapolicyd is a userspace daemon that determines access rights to files based on a trust database and file or process attributes.

It can be used to either blacklist or whitelist file access and execution.