I love to see Linux Kernel, distributions put more focus on easy program / workflow that detect of insecure behaviors. (Good old ZoneAlarm type GUI / workflow

I love to see Linux Kernel, distributions put more focus on easy program / workflow that detect of insecure behaviors. (Good old ZoneAlarm type GUI / workflow would be very nice.) * Report and block if someone able to run any kind of privilege escalation exploit. * Report and block if any non-white list apps attempt to make any network connections to internet and any external IP. * Report and block if any non-white list apps, scripts try to run and execute any program. Selinux seems to claim it can do most of these. But the barrier of entry to setup and using it effectively is high (at lease for noob like me).