Vrack Egress #68

New issue

Open

opened 2020-11-30 16:30:15 +00:00 by rafael · 2 comments

rafael commented

2020-11-30 16:30:15 +00:00

(Migrated from gitlab.privaz.io)

thin control or firewall destinations while installing packages is a very complex tasks.

In particular when repository packages use CDNs, etc.

Perhaps it would be best to limit the access to certain applications of users of the system. for example the package manager or user under which the package manager runs.

The package managers has lower risks of wide internet access because it will mainly download packages and will check their signatures.

thin control or firewall destinations while installing packages is a very complex tasks. In particular when repository packages use CDNs, etc. Perhaps it would be best to limit the access to certain applications of users of the system. for example the package manager or user under which the package manager runs. The package managers has lower risks of wide internet access because it will mainly download packages and will check their signatures.

rafael commented

2020-11-30 17:35:34 +00:00

(Migrated from gitlab.privaz.io)

It is possible to limit by several process parameters:

process name
owner name
owner uid

https://www.frozentux.net/iptables-tutorial/iptables-tutorial.html#OWNERMATCH

It is possible to limit by several process parameters: - process name - owner name - owner uid https://www.frozentux.net/iptables-tutorial/iptables-tutorial.html#OWNERMATCH

rafael commented

2020-11-30 17:42:52 +00:00

(Migrated from gitlab.privaz.io)

mentioned in issue #69