I didn't mean per user vs per system; in as much a per process image. ie: firefox can get out to *, but sandbox can not. If you have never used something like

I didn't mean per user vs per system; in as much a per process image. ie: firefox can get out to *, but sandbox can not. If you have never used something like Little Snitch on MacOS it is very surpassing to see all the outgoing connections from processes. It returns some control to the user to block cloud services, application dial home, etc. Being able to interactively allow/deny access to resources (say via hostname or via IP) per connection per process (image?) is very valuable. This is hard to do in linux. Several good solutions to do this in MacOS and Windows.