Hacker News Reader

It's interesting hw lng it took for linux to get a user friendly application firewall like OpenSnitch

It's because there's no way to make universal kernel modules/drivers, like it is on Windows.

The way to make kernel modules is to submit them to the kernel. Not really sure what a “universal kernel module” really is.

Also that seems irrelevant because it seems this was implemented in eBPF so no kernel modules are required.

> The way to make kernel modules is to submit them to the kernel.

Then it would need to be published as GPL, but with no guarantee that it will ever be accepted.

> Not really sure what a “universal kernel module” really is.

A .ko that can be loaded in a wide range of kernel versions.

> Also that seems irrelevant because it seems this was implemented in eBPF so no kernel modules are required.

And it has serious limitations. There's a chapter of them in the readme.