Re: block a program from access the Internet.

[Pascal Hambourg <pascal@plouf.fr.eu.org>]

Lars Noodén a écrit :
> 
> Vincent's link suggests that --cmd-owner was removed from iptables
> entirely.

Actually it was removed from the kernel part of iptables, not from the
iptables userland.

> It would be important to find a more authoritative source on
> that like the netfilter list or the kernel list.

Is the Linux 2.6.14 changelog authoritative enough ?

commit 34b4a4a624bafe089107966a6c56d2a1aca026d4
Author: Christoph Hellwig <hch@lst.de>
Date:   Sun Aug 14 17:33:59 2005 -0700

    [NETFILTER]: Remove tasklist_lock abuse in ipt{,6}owner

    Rip out cmd/sid/pid matching since its unfixable broken and stands
    in the way of locking changes to tasklist_lock.