Re: forbid internet access to an application?

In comp.os.linux.networking Allen Kistler <ackistler@xxxxxxxxx>:
lucatrv wrote:
Hi, I'd like to ask if it's possible to restrict access to the internet to
an application (i.e. the list of files which belongs to a package).
Under windows there are plenty of firewall programs, which make you decide
if an application should access the internet or not.
I looked on internet and didn't find anything similar under linux. For what
I could understand, neither apparmor or selinux can do that...

The netfilter owner module can accomplish this objective (according to
the man page, though I've never used it). The switch you want is
--cmd-owner, however the man page also states that cmd matching is
broken on SMP machines. YMMV

Indeed, nice shot. I see other options I hadn't seen last time
checking the man page. Presuming the OP had done his homework, I
didn't bother to take a look before replying...

--
Michael Heiming (X-PGP-Sig > GPG-Key ID: EDD27B94)
mail: echo zvpunry@xxxxxxxxxx | perl -pe 'y/a-z/n-za-m/'
#bofh excuse 4: static from nylon underwear
.

Relevant Pages

  • Re: forbid internet access to an application?
    ... Under windows there are plenty of firewall programs, ... I looked on internet and didn't find anything similar under linux. ...
    (comp.os.linux.networking)
  • Re: forbid internet access to an application?
    ... Under windows there are plenty of firewall programs, ... It is like denying access to a building to anyone who says their name is John. ...
    (comp.os.linux.networking)
  • I think I have been hijacked.
    ... I am running windows xp on my Compaq Presario and Toshiba laptop, ... An internet connection appears to have been added through a USB. ... R - Registry, StartPage/SearchPage changes ... Fixed crashing bug on certain Win2000 and WinXP systems at O23 listing ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Please help with pop-ups!!
    ... Sometimes I'm not on the internet ... A1) No. Microsoft NEVER sends emails with security update attachments. ... pages where you can access Windows Update, download patches, or request ...
    (microsoft.public.security)
  • Re: Built in Admin account added
    ... system properly before putting it back on the internet. ... where to get a firewall and antivirus program are all below: ... Keep in mind during the investigation that this might NOT be a hacker ... You can also use the NETSTAT -A command that comes with Windows to look at ...
    (microsoft.public.win2000.security)