Network firewalls for the Linuxes have historically been application-blind. Which is a point of shame for a platform prided on security and privacy, especially considering that proprietary competitor Windows has had per-program discriminating firewalling so much sooner. A while back, I’d found OpenSnitch to be functionally ready. After using it on my daily driver for several months, I’m finally comfortable sharing some operational practices. Setting Up For First Use After pulling the open...
