SPONSORED LINKS
You could always use grsecurity to disable running untrusted executables instead of trusting filesystem permissions to accomplish that.
Score:2