So I constantly find myself downloading executable's from the internet and running them on my computer. Although I don't run everything I find on the net, I still don't want to trust them with all my personal files since they aren't in the repositories.
Some example program's: Sublime, Intellij, various node-webkit apps, java jdk 8, latest node.js build.
The solution I'm looking for is something down the line of running the executable as another user, and giving it permission to read selected directories that i own, but restricting it from the rest. I would like to steer clear of managing multiple groups, users, permissions, apparmor profiles manually, that I probably would forget how was setup after some time.
Does there exist packages or solutions that takes an executable as input, and then you specify which directories and / or files that executable has r / w / x permissions?
Or better, the system prompts you when the executable wants to do something it's not already allowed to do, and you either allow it or restrict it.
If not, how would we go about making one?