search

evilsocket / opensnitch

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
GNU General Public License v3.0
9.86k stars 488 forks source link

[Feature Request] Ability to list and remove, non-existent files' rules #920

Open bfcns opened 1 year ago

bfcns commented 1 year ago

Being able to list non existent executable in rules, so the rule can be easily removed.

gustavo-iniguez-goya commented 1 year ago

hi @phpcitizen ,

by non-existent files' rules do you mean temporary rules? put an example please so I can undesrtand it better.

bfcns commented 1 year ago

Sure, I mean files removed from the system do not need firewall rules anymore, so we can detect and remove them. Like a button with "find invalid rules", then it would list the rules that have no resolved links to an executable anymore.

bfcns commented 1 year ago

If I may add another feature request.

There should be another default Duration/Action selection option in settings for unattended (when you are not in front of the computer) when the timeout passes of a pop-up.

NRGLine4Sec commented 1 year ago

Sure, I mean files removed from the system do not need firewall rules anymore, so we can detect and remove them. Like a button with "find invalid rules", then it would list the rules that have no resolved links to an executable anymore.

It's not a bad idea. But for some rules, it can be quite complicated. For example, rules that concern AppImages may be included in the list whose binaries do not exist, while the situation may be quite normal if the AppImage software is not running.

bfcns commented 1 year ago

Yes, I understand, but I think this can be mitigated with pinning some rules...