Allow internet/network access based on binary -- ask user for permission if a binary wants to connect to the internet

[Bastien Nocera]

----- Original Message -----
> I only want certain binaries to be allowed network access.
> 
> For example, I want to allow the below binaries access to the internet:
> 
> /usr/lib64/firefox/firefox
> /usr/lib/virtualbox/VirtualBox
> /bin/yum (it seems to be done via python like /usr/bin/python /bin/yum
> update -- so here obviously python is allowed network access only for
> yum ('the binary'). This rule should not give python network access
> for any other binaries/.py scripts etc.)
> 
> I want no other binary to be able to access the network.

It's not implementable, because you have no way to know that the
binary trying to access the network is what it says it is.

For now, at least. We'll certainly get something like that when
application sandboxing is implemented and deployed.