-
-
Notifications
You must be signed in to change notification settings - Fork 574
Description
Hello everyone !
I have seen the the program's pop-ups sometimes show generic tools want to connect to the internet, like http, curl, etc.
So it got me wondering...
What if we have two programs:
Program 1
Program 2
And both take advantage by a third party tool like CURL (or wget)
It looks to me that if I want to allow Program 1, but deny Program 2, it would seem to me that I need to also allow CURL for Program 1 to work.
But doing it so, I don't see what's stopping Program 2 to use the allowed CURL too to send and receive data it wants even though Program 2 is denied ?
Can OpenSnitch look at who (which program) called CURL and allow or deny its connection based on allowed / denied permission of the caller, making the permission for CURL dynamic ?
From what I know systemd should have a hierarchy with which programs started which programs, but I don't know if it can track who called who
Does OpenSnitch has such capability or could it be implemented in the future with the help of systemd or other tool ?