Re: forbid internet access to an application?

In comp.os.linux.networking Pascal Hambourg <boite-a-spam@xxxxxxxxxxxxxxx>:
Hello,

Allen Kistler a écrit :

The netfilter owner module can accomplish this objective (according to
the man page, though I've never used it). The switch you want is
--cmd-owner, however the man page also states that cmd matching is
broken on SMP machines.

Support for the --pid-owner, --sid-owner and --cmd-owner options has
been removed from kernel 2.6.14 and later versions.

Interesting, seems my man page is broken and the OP back to the
script I had already recommended. ;-)

[NETFILTER]: Remove tasklist_lock abuse in ipt{,6}owner

Rip out cmd/sid/pid matching since its unfixable broken and stands in
the way of locking changes to tasklist_lock.

--
Michael Heiming (X-PGP-Sig > GPG-Key ID: EDD27B94)
mail: echo zvpunry@xxxxxxxxxx | perl -pe 'y/a-z/n-za-m/'
#bofh excuse 338: old inkjet cartridges emanate barium-based
fumes
.