causalhonk/dots
1
0
Fork 0
forked from nico/dots
Code Pull requests Activity

opensnitch: add rules for many programs

Browse source 
adds rules for:
- systemd-timesyncd
- nsncd
- firefox
- nix
- steam
- electron (apps like obsidian and vesktop)
- prismlauncher
- speech dispatcher
This commit is contained in:
Nico 2025-05-03 16:16:02 +10:00
parent 0f2adee8c5
commit 28f4b4ade3
1 changed files with 111 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

111
modules/linux/opensnitch.nix
View file

@ -8,6 +8,117 @@
LogLevel = 2;
Stats.MaxEvents = 3;
};
rules = {
"systemd-timesyncd" = {
"name" = "systemd-timesyncd";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.systemd}/lib/systemd/systemd-timesyncd";
};
};
"nsncd" = {
"name" = "nsncd";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.nsncd}/bin/nsncd";
};
};
"firefox" = {
"name" = "firefox";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.firefox}/bin/firefox";
};
};
"firefox-regexp" = {
"name" = "firefox2";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "regexp";
"sensitive" = false;
"operand" = "process.path";
"data" = "/nix/store/[aA0-zZ9]*-firefox-.*/.*"; # im too lazy smh
};
};
"nix" = {
"name" = "nix";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.nix}/bin/nix";
};
};
"steam" = {
"name" = "steam";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "regexp";
"sensitive" = false;
"operand" = "process.path";
"data" = "^/home/[aA0-zZ9]*/.local/share/Steam/(ubuntu12_[0-9][0-9]|linux[0-9][0-9])/steam.*";
};
};
"electron" = {
"name" = "electron";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.electron}/libexec/electron/electron";
};
};
"prismlauncher" = {
"name" = "prismlauncher";
"enabled" = true;
"action" = "allow";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.prismlauncher-unwrapped}/bin/prismlauncher";
};
};
"speech-dispatcher" = {
"name" = "speech-dispatcher";
"enabled" = true;
"action" = "block";
"duration" = "always";
"operator" = {
"type" = "simple";
"sensitive" = false;
"operand" = "process.path";
"data" = "${pkgs.speechd}/bin/speech-dispatcher";
};
};
};
};
environment.systemPackages = [