Temporary workaround to drop connections from the sandbox manager that we can't further identify.

sgfw/socks_server_chain.go

@@ -281,6 +281,12 @@ func (c *socksChainSession) filterConnect() (bool, bool) {
 
 	if pinfo == nil {
 		pinfo = procsnitch.FindProcessForConnection(c.clientConn, c.procInfo)
+		// FIXME: TEMPORARY HACK
+		if pinfo.ExePath == "/usr/sbin/oz-daemon" {
+			log.Warningf("Rejecting unknown connection from /usr/bin/oz-daemon: %v", )	
+			return false, false
+		}
+
 	}
 
 	if pinfo == nil {