On Mon, 2014-12-22 at 23:24 +0100, Kevin Kofler wrote:
Stephen John Smoogen wrote:
> User A wants to be notified of all programs opening ports even if he is
> going to whitelist them.
> User B does not want to be notified and could care less about security.
User C does not want to be notified either, but just wants everything
I doubt that User C *as described* exists. I suspect you meant "User C
does not want an interactive notification. They want things to be
blocked and logged appropriately, so that if things are not behaving as
expected, they can find out why and what they would need to change to
get it working again".
I'd argue that something similar to the SELinux Troubleshooter would be
a useful solution here, if interfaces could be added to support it.