How would you implement a group policy like "Audit the access of global system objects" in user-mode on Linux?
Hmm interesting. I thought that guy meant the whole group policy system, which can change settings in user mode programs (such as explorer) and is akin to /etc files or in the kernel (like the one you mentioned) and is akin to sysctl
The entire value of group policy is in the whole thing, not the individual pieces. The group policy system would be almost useless without the actual group policies it comes with; the actual policies and their vertical integration through the kernel and all the way to the UI are what bring in pretty much all the value. Viewing it as a glorified regedit or dconf-editor that's basically decoupled from the rest of the OS kind of misses the larger picture.