robotchaos
Long time nixers
Learning new, using the option --net=none also creates a new loopback interface for that program. So it can't even use the loopback to get to the real machine. Quick note, pretty cool. I use this option to prevent programs from accessing the network if they aren't supposed to. Paranoid enough to make sure they are unable to.


Messages In This Thread
firejail - by robotchaos - 02-09-2016, 02:08 PM
RE: firejail - by venam - 02-09-2016, 02:32 PM
RE: firejail - by robotchaos - 13-09-2016, 06:43 PM
RE: firejail - by robotchaos - 11-10-2016, 03:05 PM
RE: firejail - by josuah - 17-10-2016, 05:06 PM
RE: firejail - by oldnix - 03-02-2017, 10:05 AM