1. A method of securing executables and processes comprising: providing a mechanism to track and control operations for files having setuid/gid permissions and processes having setuid/gid privileges; defining a policy rule controlling said operations on said files and said processes; and using said policy rule to control operations involving said files and said processes.