I would like to have per-application egress control on linux without containerising everything myself or writing baroque filtering that is undebuggable. I shoul

I would like to have per-application egress control on linux without containerising everything myself or writing baroque filtering that is undebuggable. I shouldn't need to trust every line of code in some massive package just to run it safely -- and I shouldn't have to tcpdump it to see what it is doing on the network.