search

evilsocket / opensnitch

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
GNU General Public License v3.0
10.78k stars 503 forks source link

feat(daemon): add OpenRC script #900

Closed mjholub closed 1 year ago

mjholub commented 1 year ago

this PR adds a very basic script that would allow to get opensnitchd running under OpenRC init system. I've managed to get it to "work" i.e. not to crash, under Alpine 3.17 with Linux6.2.8-0-edge x86_64, but I keep getting this error:

Error creating queue #0: Error binding to queue: operation not permitted

I've set it to run using proc instead of bpf, because I have a hardened kernel. I can try giving it a test run in a VM without bpf hardening (I assume docker won't do in this case...). After this is merged and this issue resolved (I'll try to tackle this by myself, but any help is appreciated), I'd like to then proceed to package the application's components into an APKBUILD, so that it can be easily installed on Alpine.

gustavo-iniguez-goya commented 1 year ago

thank you @154pinkchairs ! sorry for the delay, I'm a bit offline lately.

gustavo-iniguez-goya commented 1 year ago

Error creating queue #0: Error binding to queue: operation not permitted

see if you have NFQUEUE support in your kernel, and in general all these options: https://github.com/evilsocket/opensnitch/issues/774