evilsocket / evilsocket/opensnitch
[Feature Request] differ activity in container from activity on host
Open
feature
- Dominant language
- Python
- Stars
- 14.1k
- Forks
- 665
- PR merge metrics
- No merged PRs in 30d
Description
I noticed opensnitch does not differ if app is running on host or in container.
once `/usr/bin/ping` was allowed on host forever, it is allowed also for containerized ping.
filter was created by executable path, it is likely to add filter by cgroup. With ebpf that is definitely possible.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.