[input_sh]

There's OpenSnitch, but it's a WIP: https://github.com/evilsocket/opensnitch