create iptables rule per process/service

前端 未结 5 1977
挽巷
挽巷 2021-01-31 09:58

is it possible to use iptables in order to permit traffic initiated by a \"process\", ie using the process name? I would like for example to allow everything that is initiated b

5条回答
  •  你的背包
    2021-01-31 10:38

    The French Wikipedia page about iptables https://fr.wikipedia.org/wiki/Iptables states that the possibility to filter with --pid-owner or --cmd-owner was removed starting from kernel 2.6.14... and links to the kernel changelog where I couldn't check this assertion since I am not a specialist of what the kernel internal structures are for!

    The equivalent page in English does not go into that level of detail.

    Filtering with UID/GID still works.

提交回复
热议问题