How to disable writing to disk for certain programs in Linux?

Question

linux

Hello! The question is in the title. Can this be done? For example, let's take a typical *.AppImage as an example. After launch, it caches data in cache, and settings in config. I tried to deprive the image of write rights, but after launch it still creates files in different folders. The image * .AppImage resulted purely for an example. It can be the launch of any program.

Answer 1

You can restrict the user on behalf of which the program is launched. Restrictions for the programs themselves are implemented in containers, for example, Flatpack has this feature https://askubuntu.com/questions/1086529/how-to-giv...

Answer 2

Selinux