3 ms·
I think the cgroup BPF filters align more with what Little Snitch can do as opposed to the TCP tracepoints. In modern versions of systemd, you can restrict a gi
by sargun 9y ago
I think the cgroup BPF filters align more with what Little Snitch can do as opposed to the TCP tracepoints. In modern versions of systemd, you can restrict a given network application to only having access to specific IPs via this mechanism.
- LamaOfRuin 9y agoIt's more about starting out with being able to see what network activity specific applications are causing before you try to define what's allowed. There are a lot of programs running on my linux desktop that I would first need to monitor before I can decide if they should be restricted (or simply uninstalled).