Privacy

50695 readers

633 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 6 years ago

MODERATORS

Firejail network filters (en.wikipedia.org)

submitted 2 months ago by FineCoatMummy@sh.itjust.works to c/privacy@lemmy.ml

2 comments fedilink hide all child comments

Hey you beautiful privacy scoundrels! You magnificently private rascals and scamps!

I used this tool for a long time. Well I found something new and wanted to share.

Firejail is an easy single shot sandboxer. It's easier than spinning up a whole ass VM. You can read about it if you wanna. What I wanted to share is, the network part of it. Which I never knew about before today!

There's an option called netlock. What it does is, it tracks any outgoing network IP the sandboxed app connects to for 60s. Then everything after that is blocked. That will print the block list it uses. You can edit it if you want, as a base. Adding or removing addresses, w/e. When you are happy, you can save and use it with the netfilter option.

It's great for let's say a podcast app, that will connect to one or a few IPs, but should not send anything to anywhere else. Or even apps that should be 100% local, and you want to keep honest apps honest.

You can do all that with a VM too, by using firewalls and w/e. But this is handy for one off uses. Cases you don't want a whole ass VM. If you trust an app to not be a trojan, but you don't totally trust where it might phone home to. You can make sure it of what it's doing. Like block analytics, but allowing a legit network endpoint for functionality.

Full docs here.

you are viewing a single comment's thread
view the rest of the comments

[–] helix@feddit.org 3 points 2 months ago (1 children)

Firejail is awesome, I love it on my desktop to sandbox games and browsers.

It's basically an easier version of SELinux for end users.

You don't need it for Flatpaks, there you want to use Flatseal.

You also don't need it for Snaps since you shouldn't use Snaps and instead switch to a different distribution which is not Ubuntu. Try Debian or literally anything else without Snaps.

Oh and thank you for the netlock feature! Can you do more than 60s so you can click around and test more?

[–] FineCoatMummy@sh.itjust.works 2 points 2 months ago

sandbox games

Oh!! I do that too. Agreed, it's awesome for this. Easiest way to do it I've found. Single player games, I never, ever want them sending anything to anywhere. Also it can sandboxes their filesystem access.

Can you do more than 60s

Hmm... I think so? Maybe? Man page says:

By default the network monitoring time is one minute.

But I haven't yet stumbled on hte way to change it, so I can't say how.