5 ms·
What do you mean you can't firewall against PID 1?
by arpa 5y ago
What do you mean you can't firewall against PID 1?
- josephcsible 5y agoIf you use a firewall to restrict systemd, your system breaks.
- md8z 5y agoI don't understand why you would do that or what you would expect to happen, systemd itself is the tool that implements service-level firewalling.
- josephcsible 5y agoLast time I checked, iptables and nftables filtering was done by the kernel, and userspace tools other than systemd existed to configure them.
- deleted 5y ago[deleted]
- md8z 5y agoI'm still not sure I understand, what is it you're trying to do exactly? Those other tools should continue to work, systemd will only conflict if you explicitly enable its eBPF stuff.
- 1_player 5y agoYou firewall against network connections, not against PIDs. What is PID 1 connecting to/accepting connections from that blocking them breaks the system?
- egberts1 5y agodig in the code