evilsocket / evilsocket/opensnitch
[Feature Request] Add setting for opensnitch daemon to only connect to socket created from opensnitch-ui
- Dominant language
- Python
- Stars
- 14.1k
- Forks
- 665
- PR merge metrics
- No merged PRs in 30d
Description
### Summary:
**Problem**: any process can create a socket to which the daemon connects and tamper with the rules or disable opensnitch completely. This can be easily done by a supply chain attack from npm without root privileges, in the setup phase where malware starts disabling protections.
**Solution**: a daemon setting that allows the user to restrict OpenSnitch daemon to only connect to file sockets created by specific executables in a specific path. That way, the user can specifiy that he only wants the Opensnitch daemon to connect to sockets created by the Opensnitch UI executable, usually placed in a directory only accessible by the root user.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.