Hacker News new | ask | show | jobs
by prophesi 602 days ago
The linux kernel has a built-in firewall, and provides iptables to configure it. Firewalld is also installed by default at least on Fedora, and UFW for debian-based.

Unless this is just a battle of semantics on the fact iptables/firewalld/ufw are user space apps.
1 comments
irundebian 602 days ago
There is no clean interface to configure app-based network rules.
link
prophesi 602 days ago
I think the main gripe is Google's lack of API to access a firewall. It would make sense for the kernel to provide that API and leave the UI to user space apps.

Edit: and to clarify, you can have a user space app on Android to configure a firewall but they will either require root or a VPN-based solution like NetGuard.

link
bragr 602 days ago
Both SELinux and AppArmor support per app network rules, however they both leave something to be desired in terms of ease of use and features.

https://selinuxproject.org/page/NetworkStatements

https://manpages.ubuntu.com/manpages/bionic/en/man5/apparmor...

link