Full Disclosure mailing list archives
Re: Application level firewall
From: Andreas Gietl <a.gietl () e-admin de>
Date: Fri, 17 Oct 2003 15:01:36 +0200
On Friday 17 October 2003 14:02, Jason Freidman wrote: what you look for might by ACLs and role-model like implemented bei selinux.
Is there any sort of application level firewall for linux? Something like Zone alarm where you can trust an application? I think that openBSD has something that allows you to choose which system calls a program can run. The idea would be to restrict a bind call and connect call using kernel modules unless the program is in a config file. It would make it easier (i would think) to lockdown a computer for outgoing connections as well as add a new layer of security.
-- e-admin internet gmbh Andreas Gietl tel +49 941 3810884 Ludwig-Thoma-Strasse 35 fax +49 (0)1805/39160 - 29104 93051 Regensburg mobil +49 171 6070008 PGP/GPG-Key unter http://www.e-admin.de/gpg.html _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Application level firewall Jason Freidman (Oct 17)
- Re: Application level firewall Florian Weimer (Oct 17)
- Re: Application level firewall Raj Mathur (Oct 17)
- Re: Application level firewall fg (Oct 17)
- Re: Application level firewall Andreas Gietl (Oct 17)
- Re: Application level firewall John Leach (Oct 17)
- Re: Application level firewall Kevin Currie (Oct 17)
- <Possible follow-ups>
- RE: Application level firewall Andriy Bilous (Oct 17)
- RE: Application level firewall Oliver Heinz (Oct 17)
- RE: Application level firewall Andriy Bilous (Oct 18)
- RE: Application level firewall Adam Lydick (Oct 18)