Mark /proc MS_NOSUID and MS_NOEXEC