3 ms·

Its' really telling that Google doesn't offer an API to access a firewall which provides a clear list of connections and the apps which create them and a way to

Its' really telling that Google doesn't offer an API to access a firewall which provides a clear list of connections and the apps which create them and a way to prohibit such specific connections, possibly also according to blacklists. They really don't want users to have control over this.

ilbeeper 2y ago
Is it? Do Fedora or Ubuntu provide an API like that?
- lightdot 2y ago
  You mean, like unrestricted access to the kernel with full firewalling capabilities? ;) Yes, GNU/Linux distributions provide exactly that.
  - irundebian 2y ago
    No, you have to install additional software for that.
    - prophesi 2y ago
      The linux kernel has a built-in firewall, and provides iptables to configure it. Firewalld is also installed by default at least on Fedora, and UFW for debian-based. Unless this is just a battle of semantics on the fact iptables/firewalld/ufw are user space apps.
      - irundebian 2y ago
        There is no clean interface to configure app-based network rules.
        prophesi 2y ago
        I think the main gripe is Google's lack of API to access a firewall. It would make sense for the kernel to provide that API and leave the UI to user space apps. Edit: and to clarify, you can have a user space app on Android to configure a firewall but they will either require root or a VPN-based solution like NetGuard.
        bragr 2y ago
        Both SELinux and AppArmor support per app network rules, however they both leave something to be desired in terms of ease of use and features. https://selinuxproject.org/page/NetworkStatements https://selinuxproject.org/page/NetworkStatements https://manpages.ubuntu.com/manpages/bionic/en/man5/apparmor.d.5.html https://manpages.ubuntu.com/manpages/bionic/en/man5/apparmor...
- kristofferg 2y ago
  Yes.
alexashka 2y ago
It's more telling that governments haven't made it a mandatory feature on all devices with networking capabilities. Google hasn't made a successful product in over a decade (nor have their existing products improved in any meaningful sense) - these people are not capable of anything besides hoarding power (and passing leet code I guess :P).

ilbeeper 2y ago

Is it? Do Fedora or Ubuntu provide an API like that?

lightdot 2y ago
You mean, like unrestricted access to the kernel with full firewalling capabilities? ;) Yes, GNU/Linux distributions provide exactly that.
- irundebian 2y ago
  No, you have to install additional software for that.
  - prophesi 2y ago
    The linux kernel has a built-in firewall, and provides iptables to configure it. Firewalld is also installed by default at least on Fedora, and UFW for debian-based. Unless this is just a battle of semantics on the fact iptables/firewalld/ufw are user space apps.
    - irundebian 2y ago
      There is no clean interface to configure app-based network rules.
      - prophesi 2y ago
        I think the main gripe is Google's lack of API to access a firewall. It would make sense for the kernel to provide that API and leave the UI to user space apps. Edit: and to clarify, you can have a user space app on Android to configure a firewall but they will either require root or a VPN-based solution like NetGuard.
      - bragr 2y ago
        Both SELinux and AppArmor support per app network rules, however they both leave something to be desired in terms of ease of use and features. https://selinuxproject.org/page/NetworkStatements https://selinuxproject.org/page/NetworkStatements https://manpages.ubuntu.com/manpages/bionic/en/man5/apparmor.d.5.html https://manpages.ubuntu.com/manpages/bionic/en/man5/apparmor...
kristofferg 2y ago
Yes.

alexashka 2y ago

It's more telling that governments haven't made it a mandatory feature on all devices with networking capabilities. Google hasn't made a successful product in over a decade (nor have their existing products improved in any meaningful sense) - these people are not capable of anything besides hoarding power (and passing leet code I guess :P).