Hacker News new | ask | show | jobs
by ilbeeper 596 days ago
Is it? Do Fedora or Ubuntu provide an API like that?
2 comments
lightdot 596 days ago
You mean, like unrestricted access to the kernel with full firewalling capabilities? ;)

Yes, GNU/Linux distributions provide exactly that.

link
irundebian 596 days ago
No, you have to install additional software for that.
link
prophesi 596 days ago
The linux kernel has a built-in firewall, and provides iptables to configure it. Firewalld is also installed by default at least on Fedora, and UFW for debian-based.

Unless this is just a battle of semantics on the fact iptables/firewalld/ufw are user space apps.

link
irundebian 596 days ago
There is no clean interface to configure app-based network rules.
link
prophesi 596 days ago
I think the main gripe is Google's lack of API to access a firewall. It would make sense for the kernel to provide that API and leave the UI to user space apps.

Edit: and to clarify, you can have a user space app on Android to configure a firewall but they will either require root or a VPN-based solution like NetGuard.

link
bragr 596 days ago
Both SELinux and AppArmor support per app network rules, however they both leave something to be desired in terms of ease of use and features.

https://selinuxproject.org/page/NetworkStatements

https://manpages.ubuntu.com/manpages/bionic/en/man5/apparmor...

link
kristofferg 596 days ago
Yes.
link