evilsocket / opensnitch

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
GNU General Public License v3.0
10.91k stars 509 forks source link

New connection blocked while UI prompt open. #40

Closed kolorafa closed 7 years ago

kolorafa commented 7 years ago

It works briliantly, something I did love from WinXP time with few good Firewalls i did use that did ask you for every app/connection with allow/disallow.

The only problem for now is that even if you have app whitelisted it still will be blocked until you clear all prompts.

Way to reproduce:

  1. run opensnitch
  2. use for example ssh to connect to server - whitelist ssh app 2.a try if it's working, no more promots
  3. use different app not whitelisted that will show opensnitch allow/deny prompt
  4. try to connect to ssh without closing the opensnitch prompt

Expected output: you are still allowed to connect to ssh Actual result: ssh is blocked until all prompts are closed.

Why does it matter? For example you are trying to connect to your PC remotly

$ sudo opensnitch [2017-05-04 20:51:03,858] (INFO) Using rules database from /home/kolorafa/opensnitch.db [2017-05-04 20:51:03,858] (INFO) OpenSnitch v0.0.2 running with pid 28879. [2017-05-04 20:51:03,874] (INFO) Enabling ProcMon ... [2017-05-04 20:51:03,880] (INFO) ProcMon running ...

Overall gread job!

kolorafa commented 7 years ago

It will probably be fixed while implementing this

MarkoShiva commented 7 years ago

This is one of the problems especially if you are using wm's like i3wm because then if you switch on one workspace and try to open something new while forgetting that you already have a prompt on another one. The workaround on the wm like i3wm is to enable sticky mode for the window so it stay on every workspace when you move. And yeah this is a bad problem.

adisbladis commented 7 years ago

Just an FYI, I have a fix for this which just needs some code polish, will make a PR after work today :)

MarkoShiva commented 7 years ago

thx looking forward to that.