Arch Linux

Saadat01

Member

Registered: 2022-09-05

Posts: 2

How to only allow a specific app to connect to the internet?

Suppose, I want to only allow a specific application or process to connect to the internet. I have networkd as my network manager. Can anyone tell me how can I do this?

Maniaxx

Member

Registered: 2014-05-14

Posts: 738

Re: How to only allow a specific app to connect to the internet?

OpenSnitch:
https://github.com/evilsocket/opensnitch

iptables/gid:

$ sudo groupadd nointernet
$ sudo iptables -A OUTPUT ! -d 192.168.0.0/16 -m owner --gid-owner nointernet -j REJECT --reject-with icmp-port-unreachable
$ sudo -E -g nointernet /usr/bin/firefox

This is the opposite (group gets blocked) but you get the point.

---

sys2064