Update README.md

This commit is contained in:
2026-03-08 20:37:45 +00:00
parent 77b00bed2e
commit e3a672fd01

View File

@@ -1,3 +1,27 @@
# No-Internet Group # No-Internet Group
## Description ## Description
Simple methodology to prevent certain Linux desktop programs having access to the public Internet via systemd and iptables Simple methodology to prevent specified Linux desktop programs having access to the public Internet via iptables
## Getting Started
### Dependencies
*iptables
*systemd or cron
*sg
### Creating the Group
First we will create the controlled access group through which programs will be denied public network access
```
groupadd no-internet
```
### Creating the Systemd Service
Note: a similar effect could be achived via crontab by making an entry along the lines of
```
@reboot root iptables -I OUTPUT 1 -m owner --gid-owner "no-internet" -j DROP
```
### Modifying .desktop entries
### Limitations
As iptables operates at layer 3 programs ran through this sandboxed group will still be able to reach devices within the same broadcast domain