Hi Nik, > Can we restrict the paths from which gcc includes the header files. No, I do not believe anyone has added that kind of functionality to the preprocessor. If you want, you can submit a patch to cpp with that feature. > Can we tell gcc on a command line parameters/makefile to not include anything from "/dev" ? No, I do not believe anyone has added that kind of functionality to GNU Make or GCC. If you want, you can submit a patch to GCC and/or GNU Make with that feature. > Removing read access on those devices are not possible. Depends on the operating system. Using ACLs I was able to prohibit myself from accessing /dev/random. I probably could prohibit myself by chmod'ing the UGO bits. Also consider chroot (or jail), quotas and ulimit. HTH, --Eljay
