Even without SELinux: there should not be a habit of running an executable.
You should not be able to easily install an rpm or deb package from your browser.
Note that if installing an rpm or deb off-the-net becomes a common practice, then simply blocking an automated of it will not help - users will soon find the manual procedure for that.
It's a procedure users should know not to try. The problem here is not technological. It is a matter of getting the right working habits.
Copyright © 2017, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds