mirrors/opensnitch
1
0
Fork 0
mirror of https://github.com/evilsocket/opensnitch.git synced 2025-03-04 08:34:40 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

updated after opensnitch repo commit 448d930ceb

wiki auto updater 2022-10-01 18:58:07 +00:00
parent bf8deea5e3
commit 77e998b23f
1 changed files with 30 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

30
Compilation.md

@ -33,6 +33,36 @@ sudo ln -s /usr/lib64/qt5/bin/lrelease-qt5 /usr/local/bin/lrelease
```
Then it should build properly.
### Compiling the eBPF modules
```bash
# dependencies:
# sudo apt install -y wget flex bison ca-certificates wget python3 rsync bc libssl-dev clang llvm libelf-dev libzip-dev git libpcap-dev
cd opensnitch/
kernel_version=$(uname -r | cut -d. -f1,2)
rm -f v${kernel_version}.tar.gz
wget https://github.com/torvalds/linux/archive/v${kernel_version}.tar.gz
rm -rf linux-${kernel_version}/
tar -xf v${kernel_version}.tar.gz
patch linux-${kernel_version}/tools/lib/bpf/bpf_helpers.h < ebpf_prog/file.patch
cp ebpf_prog/opensnitch*.c ebpf_prog/common.h ebpf_prog/Makefile linux-${kernel_version}/samples/bpf
cd linux-${kernel_version} && yes "" | make oldconfig && make prepare && make headers_install # (1 min)
cd samples/bpf && make
# objdump -h opensnitch.o #you should see many section, number 1 should be called kprobe/tcp_v4_connect
mkdir ../../../ebpf_prog/modules/
cp opensnitch*o ../../../ebpf_prog/modules/
cd ../../../
llvm-strip -g ebpf_prog/modules/opensnitch.o #remove debug info
```
Then you can copy the `*.o` files to `/etc/opensnitchd/`:
`$ sudo cp opensnitch*.o /etc/opensnitchd/`
**Daemon**