Debian 12 now includes opensnitch, but it isn't installed by default: https://people.skolelinux.org/pere/blog/OpenSnitch_available_in_Debian_Sid_and_Bookworm.h

Debian 12 now includes opensnitch, but it isn't installed by default: https://people.skolelinux.org/pere/blog/OpenSnitch_available_in_Debian_Sid_and_Bookworm.html https://people.skolelinux.org/pere/blog/OpenSnitch_available... For permission management you want all your apps from outside the distro (like Flathub), or you can manually use bubblewrap or firejail to create custom sandboxes.