hardened malloc. networking + firewall. json based config.

2026-02-08 12:36:23 -07:00
parent cdb972579a
commit 2770dfc964
46 changed files with 1443 additions and 138 deletions
--- a/config/settings/opensnitch/rules/allow-always-list-usr-sbin-chronyd-4460.json
+++ b/config/settings/opensnitch/rules/allow-always-list-usr-sbin-chronyd-4460.json
@@ -0,0 +1,33 @@
+{
+  "created": "2026-01-28T11:13:38-07:00",
+  "updated": "2026-01-28T11:13:38-07:00",
+  "name": "allow-always-list-usr-sbin-chronyd-4460",
+  "description": "",
+  "action": "allow",
+  "duration": "always",
+  "operator": {
+    "operand": "list",
+    "data": "",
+    "type": "list",
+    "list": [
+      {
+        "operand": "dest.port",
+        "data": "4460",
+        "type": "simple",
+        "list": null,
+        "sensitive": false
+      },
+      {
+        "operand": "process.path",
+        "data": "/usr/sbin/chronyd",
+        "type": "simple",
+        "list": null,
+        "sensitive": false
+      }
+    ],
+    "sensitive": false
+  },
+  "enabled": true,
+  "precedence": false,
+  "nolog": false
+}