Tobias/No-Internet.Group
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
tobias
2026-03-08 21:34:23 +00:00
parent 252b387d44
commit ce83a33131
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
View File

@@ -75,6 +75,7 @@ Note: a similar effect could be achived via crontab by making an entry along the
Simply put when a program is ran through an application launcher the .desktop file is what is what is being read from and executed in the background Simply put when a program is ran through an application launcher the .desktop file is what is what is being read from and executed in the background
They are typically located within ~/.local/share/applications They are typically located within ~/.local/share/applications
An example of a program which I want to deny network access to due to its persistent and bothersome connections is Lutris An example of a program which I want to deny network access to due to its persistent and bothersome connections is Lutris
Before modification it's Exec value will likely look something like Before modification it's Exec value will likely look something like
@@ -87,7 +88,8 @@ This may be achieved by changing the line like so:
Exec=/usr/bin/sg no-internet /usr/bin/lutris Exec=/usr/bin/sg no-internet /usr/bin/lutris
``` ```
Note: your binaries may be located in a different place type "which [program_name]" to find their path Note: your binaries may be located in a different place type "which [program_name]" to find their path
Now any time lutris is launched from my desktop it will be ran through the "no-internet" group Now any time lutris is launched from my desktop it will be ran through the "no-internet" group
### Limitations ### Limitations
As iptables operates at layer 3 programs ran through this sandboxed group will still be able to reach devices within the same broadcast domain As iptables operates at layer 3 programs ran through this sandboxed group will still be able to reach devices within the same broadcast domain