EBPFSnitch: An eBPF based Linux Application Firewall

Re:EBPFSnitch: An eBPF based Linux Application Firewall by ghotli on Sunday March 14, 2021 @11:33AM (#26456206)

This isn't upvoted enough. I use that trick verbatim to just wrap a container's execution environment around my $PWD. It's useful way beyond just isolating a program.

[ Parent | on HN ]

Re:EBPFSnitch: An eBPF based Linux Application Firewall by dastx on Sunday March 14, 2021 @12:20PM (#26456526)

I've used `alias shit='docker run --rm -it --entrypoint /bin/sh -v $PWD:/workdir -w /workdir'` for a long time. This way, whenever I need, I can just run `shit alpine` or `shit ubuntu` or whatever.

[ Parent | on HN ]

Re:EBPFSnitch: An eBPF based Linux Application Firewall by captn3m0 on Sunday March 14, 2021 @02:15PM (#26457395)

I have the same as dri (docker run interactive) and dri_cwd so current directory only mounts intentionally (with dri_cwd)

[ Parent | on HN ]