Stephen Gallagher wrote:
I doubt that User C *as described* exists. I suspect you meant
does not want an interactive notification. They want things to be
blocked and logged appropriately, so that if things are not behaving as
expected, they can find out why and what they would need to change to
get it working again".
I'd argue that something similar to the SELinux Troubleshooter would be
a useful solution here, if interfaces could be added to support it.
I am user C. I don't need a log of blocked stuff, I'd only be worried about
intruders DoSing the machine by filling the log. I really want ANY outside
access to my machine silently dropped. My machine is NOT a server, period.