News for hackers. Stuff that matters.

A comment on NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch. Parent comment

Re:NetGuard – rootless Android outbound per-app OSS firewall... by ilbeeper on Thursday October 24, 2024 @08:32AM (#41934855)
Is it? Do Fedora or Ubuntu provide an API like that?
[ Parent | on HN ]
Re:NetGuard – rootless Android outbound per-app OSS firewall... by lightdot on Thursday October 24, 2024 @08:44AM (#41934947)
You mean, like unrestricted access to the kernel with full firewalling capabilities? ;)

Yes, GNU/Linux distributions provide exactly that.

[ Parent | on HN ]
Re:NetGuard – rootless Android outbound per-app OSS firewall... by irundebian on Thursday October 24, 2024 @08:53AM (#41935021)
No, you have to install additional software for that.
[ Parent | on HN ]
Re:NetGuard – rootless Android outbound per-app OSS firewall... by prophesi on Thursday October 24, 2024 @12:27PM (#41937060)
The linux kernel has a built-in firewall, and provides iptables to configure it. Firewalld is also installed by default at least on Fedora, and UFW for debian-based.

Unless this is just a battle of semantics on the fact iptables/firewalld/ufw are user space apps.

[ Parent | on HN ]
Re:NetGuard – rootless Android outbound per-app OSS firewall... by irundebian on Thursday October 24, 2024 @12:34PM (#41937125)
There is no clean interface to configure app-based network rules.
[ Parent | on HN ]
Re:NetGuard – rootless Android outbound per-app OSS firewall... by prophesi on Thursday October 24, 2024 @12:49PM (#41937273)
I think the main gripe is Google's lack of API to access a firewall. It would make sense for the kernel to provide that API and leave the UI to user space apps.

Edit: and to clarify, you can have a user space app on Android to configure a firewall but they will either require root or a VPN-based solution like NetGuard.

[ Parent | on HN ]
Re:NetGuard – rootless Android outbound per-app OSS firewall... by bragr on Thursday October 24, 2024 @01:48PM (#41937769)
Both SELinux and AppArmor support per app network rules, however they both leave something to be desired in terms of ease of use and features.

https://selinuxproject.org/page/NetworkStatements

https://manpages.ubuntu.com/manpages/bionic/en/man5/apparmor...

[ Parent | on HN ]
Re:NetGuard – rootless Android outbound per-app OSS firewall... by kristofferg on Thursday October 24, 2024 @10:23AM (#41935802)
Yes.
[ Parent | on HN ]