Home / server / Questions / 149852
Accepted
Eduardo
Asked: 2010-06-10 13:49:40 +0800 CST

How may I start a process without having network access and later allow network access?

  • 772

I want to run a process without network access but at a later time give access to the network.

The computer will have full network connection as all the other processes but I want to start just one process without network access. (I have already checked this process runs fine without networking)

linux networking

1 Answers

  1. Best Answer

    iptables with the owner match should work.

    iptables -A OUTPUT -m owner --cmd-owner "/usr/local/bin/app" -j DROP

    There's also a --pid-owner if your kernel doesn't support cmd-owner or you really mean one process as opposed to any process of an app. --uid-owner may also meet your needs.

    • 0