Provide optional process patterns for prohibited processes

[marcus67]

Current behavior: There is only one process pattern to recognize activity of a user. If at least such a process is found the user is active, other inactive. Active processes are terminated according to the configured rules. In order to comply with the rules the user usually has to logout completely resulting termination of all processes. This is disadvantages is an activity cannot be interrupted and thus cannot be resumed in the next session.

Desired behavior: There are two more process patterns:

• prohibited processes: if a process matching this pattern is found the process is terminates immediately. This allows the creation of user accounts that have a flexible time schedule (e.g. for schooling) but should not have access to certain process groups (e.g. games).
• processes denoting inactivity: if a process matching this pattern is found the user is regarded as inactive although there may be a large number of other processes active. The pattern can be configured to match lock screen processes (by full binary path name). This way the user can log out without losing its activity context. This part is covered in Provide optional process patterns for processes denoting inactivity #145.