netjail is a user-space mechanism for limiting the ability of a process to connect sockets in the PF_INET and PF_UNIX domain. The main motivation for this is to foil (or discover) spyware or "call home" code in suspect pieces of binary-distribution-only programs.
2062e3bd63e3da7ecd933c31add9dd03a66dafd8760d66429f68c0271fa79398