Hacker News Reader

Is it? Do Fedora or Ubuntu provide an API like that?

You mean, like unrestricted access to the kernel with full firewalling capabilities? ;)

Yes, GNU/Linux distributions provide exactly that.

No, you have to install additional software for that.

The linux kernel has a built-in firewall, and provides iptables to configure it. Firewalld is also installed by default at least on Fedora, and UFW for debian-based.

Unless this is just a battle of semantics on the fact iptables/firewalld/ufw are user space apps.

There is no clean interface to configure app-based network rules.

I think the main gripe is Google's lack of API to access a firewall. It would make sense for the kernel to provide that API and leave the UI to user space apps.

Edit: and to clarify, you can have a user space app on Android to configure a firewall but they will either require root or a VPN-based solution like NetGuard.

Both SELinux and AppArmor support per app network rules, however they both leave something to be desired in terms of ease of use and features.

https://selinuxproject.org/page/NetworkStatements

https://manpages.ubuntu.com/manpages/bionic/en/man5/apparmor...

Yes.

Reply on news.ycombinator.com