opensnitch icon indicating copy to clipboard operation
opensnitch copied to clipboard

[Bug Report] Since v1.7.0 process path resolution seems to be changed

Open przemoc opened this issue 5 months ago • 0 comments

Describe the bug:

Since v1.7.0 process path resolution seems to be changed. Previously rule rejecting (or allowing) /usr/bin/xbrlapi connecting to 127.0.0.1:4101 was sufficient to prevent black screen when logging in (aka delayed logging) when default action is deny. Now, after upgrading to v1.7.0, I need to additional rule that rejects (or allows) also /bin/xbrlapi (which efffectively points to /usr/bin/xbrlapi, due to /bin -> usr/bin symlink).

Include the following information:

  • OpenSnitch version: 1.7.0
  • OS: Ubuntu
  • OS version: 24.04.2 LTS
  • Window Manager: GNOME
  • Kernel version: 6.8.0-1028-nvidia

To Reproduce:

Steps to reproduce the behavior:

  1. Install Ubuntu and OpenSnitch.
  2. Change default action to deny.
  3. Create rule rejecting as described above.
  4. Reboot.
  5. Try to log in and observe black screen.
  6. Add same rule rejecting /bin/xbrlapi.
  7. Reboot.
  8. Try to log in and observe issue is no longer there.

Expected behavior:

Resolve process path before applying rules. OR Add knob to control whether process path should be resolved before applying rules.

przemoc avatar Jun 13 '25 22:06 przemoc