r/voidlinux • u/Plus-Traffic7546 • 2d ago

Improving security

I need some help with Void Linux. I take security very seriously and would like to know how you control network access on your workstations.

For example, with nftables, I use skuid rules for NTP so that only the chrony user can access NTP servers. Similarly, I allow the _apt user to access Debian repositories, while for my regular user (UID 1000), I allow only the outbound ports that I consider safe.

However, I would also like to be able to allow or block specific applications from making certain network requests. On Debian, for example, I use OpenSnitch for this purpose. What would be the equivalent or recommended solution on Void Linux?

For applications that don't need any network connectivity at all, I believe AppArmor would be the best approach. But what about applications for which I need more fine-grained control, such as restricting which DNS servers they can use or which network

9 Upvotes

100% Upvoted

2 comments sorted by

3

u/zlice0 2d ago

idk if it's what youre looking for but i use firejail

3

u/BinkReddit 2d ago

only the `chrony` user can access NTP servers.

Why is this valuable? Why do I care if any program on my system queries an NTP server?