mirrors/opensnitch
1
0
Fork 0
mirror of https://github.com/evilsocket/opensnitch.git synced 2025-03-04 08:34:40 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

updated after opensnitch repo commit df4e643a41

wiki auto updater 2022-09-21 21:29:39 +00:00
parent c4d8783bbf
commit da8a8c65aa
1 changed files with 8 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
Rules.md

@ -168,3 +168,11 @@ Example of a complex rule using the operator _list_, saved from the GUI (Note: v
Instead of allowing `from this executable: wget`, use allow `from this executable` + `from this command line`
You can narrow it further, by allowing `from this command line` + `from this User ID` + `to this IP` + `to this port`
- Disable unprivileged namespaces to prevent rules bypass
If /proc/sys/kernel/unprivileged_userns_clone is set to 1, change it to 0. Until we obtain the checksum of a binary, it's better to set it to 0.