Quantcast
Channel: openSUSE Forums
Viewing all articles
Browse latest Browse all 40713

AppArmor Profile: Deny internet access

$
0
0
I want to deny the internet permission for some applications. Therefore, I tried first to deny the internet permission for ping, but it doesn't work.
Here is the profile of
Code:

/etc/apparmor.d/bin.ping
Code:

/{usr/,}bin/ping {
  #include <abstractions/base>
    # block ipv4 acces
    deny network inet,
    # ipv6
    deny network inet6,
    # raw socket
    deny network raw,
}

But the pinging still happens after restarting apparmor with
Code:

/etc/init.d/boot.apparmor restart
 ping google.de
PING google.de (64.15.112.99) 56(84) bytes of data.
64 bytes from cache.google.com (64.15.112.99): icmp_seq=1 ttl=57 time=11.8 ms
64 bytes from cache.google.com (64.15.112.99): icmp_seq=2 ttl=57 time=15.3 ms

How can I easily block certain apps from accessing the internet?

thanks for your help in advance!

Viewing all articles
Browse latest Browse all 40713

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>