View Single Post
Posts: 151 | Thanked: 93 times | Joined on Sep 2009 @ sofia, bulgaria
#1120
Hi all,

I'm trying to implement Application level filtering.

I found out that it could be achieved with iptables.

So this is a sample rule that should deny acroread program to use network:

iptables -A OUTPUT -m owner --cmd-owner acroread -j DROP


The problems is that it does not work on maemo with KP48.

iptables -A OUTPUT -m owner --cmd-owner acroread -j DROP
iptables v1.4.6: unknown option `--cmd-owner'
Try `iptables -h' or 'iptables --help' for more information.

I read that this CONFIG_IP_NF_MATCH_OWNER has to be on in the kernel. Is it on for KP48?


EDIT: I saw that cmd-owner is removed from current version. Is there an alternative to it?

Last edited by lidow; 2011-07-29 at 13:48.