linux - context-based access control

Question

I would like to further restrict network traffic based on the source / destination application. To do that, I'm using network namespaces, but is there a better / simpler approach? My approach requires me to explicitly declare the network namespace that an application runs in, but is it possible that I can do so using another manner? If so, what are my options?

Answer 1

I think what I was looking for was AppArmor or SELinux. Alternatively, network namespaces could also be used.