3 ms·
run mighy-snitch[1] and you’ll be a little more secure. aside from mandatory access control, for which there isn’t a usable solution for the typical desktop se
by nathants 2y ago
run mighy-snitch[1] and you’ll be a little more secure.
aside from mandatory access control, for which there isn’t a usable solution for the typical desktop setup, monitoring network access attempts is as good as it gets.
you’ll be surprised how often everything is trying to phone home. firefox is particularly chatty to mozilla endpoints.
i tried to get filesystem filtering working via this same lsm, but couldn’t get it to work well enough. haven’t made another attempt since. definitely should work. hope to revisit or setup a bounty for it someday.
1. https://github.com/nathants/mighty-snitch https://github.com/nathants/mighty-snitch