Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.security > #4829
| From | ale <ale@wwb.cc> |
|---|---|
| Newsgroups | linux.debian.security |
| Subject | Re: Which Debian packages leak information to the network? |
| Date | 2016-05-20 11:30 +0200 |
| Message-ID | <rAOUN-3HG-3@gated-at.bofh.it> (permalink) |
| References | <rAc39-439-33@gated-at.bofh.it> <rAcFP-4xl-1@gated-at.bofh.it> <rAcZc-4DW-15@gated-at.bofh.it> <rAO8r-3ca-41@gated-at.bofh.it> <rAOrL-3iw-11@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
[Multipart message — attachments visible in raw view] - view raw
I think you could also use AppArmor profiles to filter network access per application in the way you describe. On 20/05/16 09:55, Elmar Stellnberger wrote: > > > Am 2016-05-20 um 10:34 schrieb donoban: >> >> I am running Debian on Qubes OS, I use gnome-calculator on a vault >> domain (a VM without any network device) because I though it does not >> need Internet or data/files from another domain. So without any >> knowledge I was protecting myself from this privacy leak... >> >> Maybe Debian should adopt a strong policy about what packages should >> have Internet access and what does not... All packages not supposed to >> have Internet access will be blocked by firewall or a similar approach >> (probably some kind of whitelist). >> > > Well, in order to block network access for individual apps you would > need something like SELinux. However I do not know abouot the > availability of security profiles for all such apps, neither do I know > about a convenient tool to browse such profiles f.i. in order to see > whehther a given app is allowed to access the network. > -- ale [wwb.cc | 414c45.net | @414c45]
Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Which Debian packages leak information to the network? Patrick Schleizer <adrelanos@riseup.net> - 2016-05-18 18:00 +0200
Re: Which Debian packages leak information to the network? Jakub Wilk <jwilk@debian.org> - 2016-05-18 18:40 +0200
Re: Which Debian packages leak information to the network? Holger Levsen <holger@layer-acht.org> - 2016-05-18 19:00 +0200
Re: Which Debian packages leak information to the network? "georg@riseup.net" <georg@riseup.net> - 2016-05-19 02:00 +0200
Re: Which Debian packages leak information to the network? Paul Wise <pabs@debian.org> - 2016-05-19 06:00 +0200
Re: Which Debian packages leak information to the network? Cindy-Sue Causey <butterflybytes@gmail.com> - 2016-05-19 17:50 +0200
Re: Which Debian packages leak information to the network? Patrick Schleizer <adrelanos@riseup.net> - 2016-05-19 18:10 +0200
Re: Which Debian packages leak information to the network? "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2016-05-19 18:30 +0200
Re: Which Debian packages leak information to the network? donoban <donoban@riseup.net> - 2016-05-20 10:40 +0200
Re: Which Debian packages leak information to the network? Elmar Stellnberger <estellnb@gmail.com> - 2016-05-20 11:00 +0200
Re: Which Debian packages leak information to the network? ale <ale@wwb.cc> - 2016-05-20 11:30 +0200
Re: Which Debian packages leak information to the network? donoban <donoban@riseup.net> - 2016-05-20 12:00 +0200
Re: Which Debian packages leak information to the network? Jakub Wilk <jwilk@debian.org> - 2016-05-20 18:20 +0200
Re: Which Debian packages leak information to the network? Paul Wise <pabs@debian.org> - 2016-05-19 18:50 +0200
Re: Which Debian packages leak information to the network? Weber <kweber33@gmx.de> - 2016-05-20 03:50 +0200
Re: Which Debian packages leak information to the network? Geert Stappers <stappers@stappers.nl> - 2016-05-20 08:30 +0200
Re: Which Debian packages leak information to the network? Paul Wise <pabs@debian.org> - 2016-05-20 04:50 +0200
csiph-web