News for hackers. Stuff that matters.
Re:Douane: Linux personal firewall with per application rule... by n0nc3 on Sunday November 22, 2020 @01:13PM (#25179547)
Privacy tooling should not come from a page that does not work without javascript. Moreover, this functionality is easy to achieve using user groups and the iptables owner module.

Here's an example that prevents atom from leaking telemetry.

    # add group atomblind
    sudo groupadd atomblind

    # add your username to atomblind group
    sudo usermod -a -G atomblind <username>

    # do not allow outbound traffic from group atomblind
    sudo iptables -I OUTPUT -m owner --gid-owner atomblind -j DROP

    # overwrite atom binary with a hook
    # atom_binary is absolute path to your atom binary
    echo "#!/bin/bash" > atom_hook
    echo "sg atomblind -c 'atom_binary'" >> atom_hook
    chmod +x atom_hook
    ./atom_hook
Re:Douane: Linux personal firewall with per application rule... by tifadg1 on Sunday November 22, 2020 @01:36PM (#25179752)
it's never this straight-forwarding. What if I want the app to have partial connectivity?
Re:Douane: Linux personal firewall with per application rule... by n0nc3 on Sunday November 22, 2020 @01:47PM (#25179870)
Then create a separate chain with the "partial connectivity" rules you want and jump to that.

Not everyone is comfortable running random github code as root.