> there have only ever been a tiny number of backdoored open source packages First, these packages might contain vulnerabilities, second, I want to be able to

> there have only ever been a tiny number of backdoored open source packages First, these packages might contain vulnerabilities, second, I want to be able to run also third-party software including closed-source software, Windows software and random scripts from Github. If you restrict yourself to official repositories, then you cannot do much useful work. > consider Fedora using SELinux. Because SELinux is not what I want. I want a GUI with checkboxes like "Allow playing sound" or "Allow reading CPU model" rather than describing access to every individual file.