Basically create a group and add an iptables rule to it. Something like: iptable... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

vagab0nd on Oct 3, 2019 | parent | context | favorite | on: Show HN: Memos – Search engine for your screenshot...

Basically create a group and add an iptables rule to it. Something like:

  iptables -I OUTPUT 1 -m owner --gid-owner no-internet -j DROP

And then when you launch the program:

  sg no-internet ./something_fishy

panpanna on Oct 3, 2019 [–]

Is there anyway this can be done automatically with apparmor or something similar?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact