opensnitch
opensnitch copied to clipboard
[Bug Report] Since v1.7.0 process path resolution seems to be changed
Describe the bug:
Since v1.7.0 process path resolution seems to be changed.
Previously rule rejecting (or allowing) /usr/bin/xbrlapi connecting to 127.0.0.1:4101 was sufficient to prevent black screen when logging in (aka delayed logging) when default action is deny.
Now, after upgrading to v1.7.0, I need to additional rule that rejects (or allows) also /bin/xbrlapi (which efffectively points to /usr/bin/xbrlapi, due to /bin -> usr/bin symlink).
Include the following information:
- OpenSnitch version: 1.7.0
- OS: Ubuntu
- OS version: 24.04.2 LTS
- Window Manager: GNOME
- Kernel version: 6.8.0-1028-nvidia
To Reproduce:
Steps to reproduce the behavior:
- Install Ubuntu and OpenSnitch.
- Change default action to deny.
- Create rule rejecting as described above.
- Reboot.
- Try to log in and observe black screen.
- Add same rule rejecting
/bin/xbrlapi. - Reboot.
- Try to log in and observe issue is no longer there.
Expected behavior:
Resolve process path before applying rules. OR Add knob to control whether process path should be resolved before applying rules.