QubesOS / qubes-issues

The Qubes OS Project issue tracker
https://www.qubes-os.org/doc/issue-tracking/
529 stars 46 forks source link

Application Firewall #2350

Open rugk opened 7 years ago

rugk commented 7 years ago

I think it would be awesome if Qubes OS would not only have a firewall, which li9mits VMs to IPs/ports, but an application firewall, which can limit individual applications.

This is how it could look: https://subgraph.com/img/screenshots/FirewallDetailed.png As shown the firewall should be interactive and allow the user to control all the traffic, which passes out of a VM.

Advantages:

adrelanos commented 7 years ago

Related: https://github.com/QubesOS/qubes-issues/issues/1757

andrewdavidwong commented 7 years ago

@adrelanos, @rugk: Is this actually a duplicate of that issue (#1757)? Looks like it, but I'm not an expert on Subgraph.

adrelanos commented 7 years ago

1757 Is a specific suggestion for an application firewall. This ticket

is a generic suggestion for any application firewall.

andrewdavidwong commented 7 years ago

@adrelanos: Fair enough! :)

mfc commented 7 years ago

maybe mark #1757 as a duplicate of this? which we can open again if that is the path we wish to pursue in the future.

adrelanos commented 7 years ago

Makes sense.