Hacker News new | ask | show | jobs
by n0nc3 2036 days ago
Privacy tooling should not come from a page that does not work without javascript. Moreover, this functionality is easy to achieve using user groups and the iptables owner module.

Here's an example that prevents atom from leaking telemetry.

    # add group atomblind
    sudo groupadd atomblind

    # add your username to atomblind group
    sudo usermod -a -G atomblind <username>

    # do not allow outbound traffic from group atomblind
    sudo iptables -I OUTPUT -m owner --gid-owner atomblind -j DROP

    # overwrite atom binary with a hook
    # atom_binary is absolute path to your atom binary
    echo "#!/bin/bash" > atom_hook
    echo "sg atomblind -c 'atom_binary'" >> atom_hook
    chmod +x atom_hook
    ./atom_hook
1 comments

it's never this straight-forwarding. What if I want the app to have partial connectivity?
Then create a separate chain with the "partial connectivity" rules you want and jump to that.

Not everyone is comfortable running random github code as root.