3 ms·
An off-topic but somewhat related question. What is a good way to whitelist which applications can access the network on my desktop linux system? (Currently run
by heywire 6y ago
An off-topic but somewhat related question. What is a good way to whitelist which applications can access the network on my desktop linux system? (Currently running Arch, but I distro-hop quite often). Years ago when I had a MacBook, I used a program called Little Snitch. I see that there is a similar application for Linux called OpenSnitch, but I’m hoping there is a better way to utilize the built in features of Linux rather than introducing a 3rd party kernel module. Are SELinux / AppArmor the answer? Cgroups? Something else?
- totony 6y agoSelinux can add labels to network packets which can be matched with nftables & al. Its a bit complicated tho. Since you need to add and create labels. You can also match by owner in iptables. So you can have a network restricted user and sudo to it.