Re:Douane: Linux personal firewall with per application rule...
by n0nc3 on Sunday November 22, 2020 @01:13PM
(#25179547)
Privacy tooling should not come from a page that does not work without javascript. Moreover, this functionality is easy to achieve using user groups and the iptables owner module.
Here's an example that prevents atom from leaking telemetry.
# add group atomblind
sudo groupadd atomblind
# add your username to atomblind group
sudo usermod -a -G atomblind <username>
# do not allow outbound traffic from group atomblind
sudo iptables -I OUTPUT -m owner --gid-owner atomblind -j DROP
# overwrite atom binary with a hook
# atom_binary is absolute path to your atom binary
echo "#!/bin/bash" > atom_hook
echo "sg atomblind -c 'atom_binary'" >> atom_hook
chmod +x atom_hook
./atom_hook
Here's an example that prevents atom from leaking telemetry.