opensnitch/daemon/default-config.json

{
    "Server":
    {
        "Address":"unix:///tmp/osui.sock",
        "LogFile":"/var/log/opensnitchd.log"
    },
    "DefaultAction": "allow",
    "DefaultDuration": "once",
    "InterceptUnknown": false,
    "ProcMonitorMethod": "proc",
    "LogLevel": 2,
    "Firewall": "iptables"
}
allow to configure process monitor method in daemon config Added ProcMonitorMethod, which can be "proc", "ftrace" or "audit". Parameters passed by command line take prevalence over default configuration. breaking changes: config options changed from xx_yy to XxYy. Config example: { "DefaultAction": "allow", "DefaultDuration": "once", "InterceptUnknown": true, "ProcMonitorMethod": "audit" } 2020-03-16 01:37:33 +01:00			`{`
set server address and log file from the default config The server address and log file were hardcoded into the opensnitchd.service file, making it almost impossible to change. Soon we'll be able to change it from the UI. 2020-10-26 23:16:27 +01:00			`"Server":`
			`{`
			`"Address":"unix:///tmp/osui.sock",`
			`"LogFile":"/var/log/opensnitchd.log"`
			`},`
allow to configure process monitor method in daemon config Added ProcMonitorMethod, which can be "proc", "ftrace" or "audit". Parameters passed by command line take prevalence over default configuration. breaking changes: config options changed from xx_yy to XxYy. Config example: { "DefaultAction": "allow", "DefaultDuration": "once", "InterceptUnknown": true, "ProcMonitorMethod": "audit" } 2020-03-16 01:37:33 +01:00			`"DefaultAction": "allow",`
			`"DefaultDuration": "once",`
			`"InterceptUnknown": false,`
added default log level to default conf 2020-05-30 23:03:59 +02:00			`"ProcMonitorMethod": "proc",`
allow to configure what firewall to use Before this change, we tried to determine what firewall to use based on the version of iptables (if -V legacy -> nftables, otherwise iptables). This caused problems (#455), and as there's no support yet for nftables system firewall rules, it can't be configured to workaround these errors. Now the default firewall to use will be iptables. If it's not available (installed), can't be used or the configuration option is empty/missing, we'll use nftables. 2021-08-09 00:21:43 +02:00			`"LogLevel": 2,`
			`"Firewall": "iptables"`
allow to configure process monitor method in daemon config Added ProcMonitorMethod, which can be "proc", "ftrace" or "audit". Parameters passed by command line take prevalence over default configuration. breaking changes: config options changed from xx_yy to XxYy. Config example: { "DefaultAction": "allow", "DefaultDuration": "once", "InterceptUnknown": true, "ProcMonitorMethod": "audit" } 2020-03-16 01:37:33 +01:00			`}`