iptables Linux Firewall

If your kernel was compiled with CONFIG_IP_NF_MATCH_OWNER then you can configure your iptables firewall to allow or reject packets on a per-command basis.

iptables -A OUTPUT -m owner --cmd-owner acroread -j DROP

The owner module only allows matches on the OUTPUT chain!