Re: forbid internet access to an application?

Hello,

Allen Kistler a écrit :

The netfilter owner module can accomplish this objective (according to
the man page, though I've never used it). The switch you want is
--cmd-owner, however the man page also states that cmd matching is
broken on SMP machines.

Support for the --pid-owner, --sid-owner and --cmd-owner options has been removed from kernel 2.6.14 and later versions.

[NETFILTER]: Remove tasklist_lock abuse in ipt{,6}owner

Rip out cmd/sid/pid matching since its unfixable broken and stands in
the way of locking changes to tasklist_lock.
.