search

netblue30 / firejail

Linux namespaces and seccomp-bpf sandbox
https://firejail.wordpress.com
GNU General Public License v2.0
5.55k stars 557 forks source link

--fwmark support #1967

Open Hello71 opened 6 years ago

Hello71 commented 6 years ago

it does what it says on the tin. I think it is a better solution than netns for #1844. for my use case, I want to exclude some processes from wireguard, but still want to use wg-quick. this way, instead of having to set up all namespaces myself, I just need to set the fwmark to the same as wg-quick.

Hello71 commented 6 years ago

tbh I'm not sure this is a good idea, but I don't see any obvious issues with it.