You can also do it while having a way to stop it, it doesn’t have to be forced on the user. It’s just isolated productivity environment.

Thanks for LeechBlock as I see it’s FOSS https://github.com/proginosko/LeechBlockNG

and I will try AppArmor.

Examples?

How the same thing can be done without being seen as a malware?

Good idea, thanks.

Behaves as such but I don’t think so.

Yeah that’s idea but it will also lose some of the setup that I have right now. I wonder how hard it would he to tell the kernel not to spawn anything during session time.