Is there any way to set up Linux in such a way that a regular user can not view or modify an encrypted file (located on an encrypted partition probably), while he at the same time is allowed to work with an application that has full access to that file? Please note that the file should be encrypted and not just inaccessible.
Reason: I want to use sqlite for my application, but it is not encrypted, and storing encrypted chunks is not a good idea in terms of proper indexing. So I thought maybe Linux may solve this. Oh, and this application will be delivered along with a set-up machine, so end-users wont need to mess with the partitions and installation.