Temporary workaround to drop connections from the sandbox manager that we can't further identify.

shw-merge
dma 7 years ago
parent 755e0088c5
commit 9ac3c3fa92

@ -281,6 +281,12 @@ func (c *socksChainSession) filterConnect() (bool, bool) {
if pinfo == nil { if pinfo == nil {
pinfo = procsnitch.FindProcessForConnection(c.clientConn, c.procInfo) pinfo = procsnitch.FindProcessForConnection(c.clientConn, c.procInfo)
// FIXME: TEMPORARY HACK
if pinfo.ExePath == "/usr/sbin/oz-daemon" {
log.Warningf("Rejecting unknown connection from /usr/bin/oz-daemon: %v", )
return false, false
}
} }
if pinfo == nil { if pinfo == nil {

Loading…
Cancel
Save