0

I know this idea isn't too good to must be introduced, Probably more than single person will wrote: better approach is creating app profile.
I think my approach will better fit to nontechnical people and I think we cannot prepare apparmor profile for each application.

Description of my idea:
When plasma/kde starting application, enclose it into current activity access environment. Use some X proxy to made applications creating Xatom lock working. Use different xdg_config,_cache,_etc env to allow running multiple instances of the same apps. User could set activity to not restricted, while creating, to disable this mechanism.

Usage: When I need to play some game, I switch onto gamming activity. Each game could access others,but not browser history, because I use different activity called internet tosurf the web.