Cerberus is an experimental tool kernel based for hardening systems. The main idea in local is that, except particular cases, a process cant have better privileges than his father. If Cerberus intercepts anomalies it kills the process before it starts to run. Cerberus stops remote exploits by ensuring that processes like in.telnetd or tcpd will never drop a shell.
