evilsocket / evilsocket/opensnitch

[Feature Request] Add setting for opensnitch daemon to only connect to socket created from opensnitch-ui

Open
#1,394 7 comments 5 reactions 0 assignees View on GitHub
feature
Dominant language
Python
Stars
14.1k
Forks
665
PR merge metrics
No merged PRs in 30d

Description

### Summary:

**Problem**: any process can create a socket to which the daemon connects and tamper with the rules or disable opensnitch completely. This can be easily done by a supply chain attack from npm without root privileges, in the setup phase where malware starts disabling protections.

**Solution**: a daemon setting that allows the user to restrict OpenSnitch daemon to only connect to file sockets created by specific executables in a specific path. That way, the user can specifiy that he only wants the Opensnitch daemon to connect to sockets created by the Opensnitch UI executable, usually placed in a directory only accessible by the root user.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.