3 ms·
> You could completely trust this app if you could ban it from accessing the internet. Yes. I have a "no-internet" user group on my linux system. Whenever I wa
by vagab0nd 7y ago
> You could completely trust this app if you could ban it from accessing the internet.
Yes. I have a "no-internet" user group on my linux system. Whenever I want to run an untrusted app I run it under that group.
- severine 7y agoThat's interesting, care to share some details?
- vagab0nd 7y agoBasically create a group and add an iptables rule to it. Something like: iptables -I OUTPUT 1 -m owner --gid-owner no-internet -j DROP And then when you launch the program: sg no-internet ./something_fishy
- panpanna 7y agoIs there anyway this can be done automatically with apparmor or something similar?