logoalt Hacker News

ameliusyesterday at 8:51 PM1 replyview on HN

You can also use network namespaces to simply block internet access for certain processes. It can even be finetuned with whitelists or blacklists.


Replies

mmoossyesterday at 9:06 PM

Could you provide more details? Many applications use multiple processes, and use some intermittently. It seems like quite a bit of work to enumerate every process used and then to keep the white/blacklist updated as usage and software changes - every new application or command you use, every update, every OS change that affects networking or system calls etc ...

show 1 reply