What would be an elegant and secure way to jail a specific #linux desktop app from using the internet while allowing all other apps to function normal?

#AskNostr