[GuqLyr]

> In Linux, it's harder, because there's no way (that I know) to control network access by process.

What about https://github.com/gustavo-iniguez-goya/opensnitch ?