evilsocket / evilsocket/opensnitch

[Feature Request] daemon sighup support

Open
#1,602 0 comments 1 reaction 0 assignees View on GitHub
feature
Dominant language
Python
Stars
14.1k
Forks
665
PR merge metrics
No merged PRs in 30d

Description

I have not found a similar issue/request

## Summary:

It is a common feature in *nix daemons that a SIGHUP message sent to a service will cause the service to reload all configurations with zero (or near-zero) downtime. Currently the only option we have is to restart the service completely - but this means that the "protections" available from the service are temporarily unavailable.

## Reason for noticing:

I've been crafting rules and finding that they didn't quite work or aren't loaded properly unless I restart the daemon completely. This is partly my own fault for having bad rules - but also it does highlight how fragile the service can be.

## Other consequences

This *also* highlights an issue with existing long-lived connections to hostname destinations, where the link between the IP and the "allowed hostname" is forgotten. When the service restarts, these destinations are only recognised as IP addresses instead of their full hostnames. So when Steam happens to connect to "api.steampowered.com" that was allowed ; but after the restart, the connection to that same host `23.52.28.42` no longer links to that allowed hostname and gets blocked. I'm not sure if I should file a separate feature request for that. It is already two feature requests in quick succession so far from me. :-)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.