HEADLINE: personal firewall, hips firewall, app sandbox
DESCRIPTION: 1) personal firewall. (ala sygate, little snitch, kerio personal firewall, etc). This is essential (and shame on ALL OS vendors for not supplying one) as it is insane that apps can just willy, nilly go where ever and when ever they want. This is the very cornerstone of insecurity (malware, hacking). For every connection I want to see an interactive popup (with IP address, app name, etc) with the options (allow, deny, make permissions permanent).
2) HIPS (host instrusion protection) firewall, the exact same thing as #1, but for apps, not internet. If an app is starting or calling another app (or link library (DLL)) I want to know about it and stop it before it runs.
3) App sandbox that provides virtual filesystem, etc for any app I want to run but want to refuse it direct access to system files, etc.
=== I tried Douane (linux personal firewall) but failed at making it run because there are no binaries provided and it didn't compile correctly and I don't have the time to debug it. So at least provide this in binary form from the unbuntu respositories.