Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

I want to run a process without network access but at a later time give access to the network.

The computer will have full network connection as all the other processes but I want to start just one process without network access. (I have already checked this process runs fine without networking)

share|improve this question
3  
Can tell us a bit more about what you mean? Are you saying the computer will not be on the network at startup, but will become available later? – Zoredache Jun 9 '10 at 22:01
depends intirely on the process / software. Some software wont boot unless network connectivity is established. – GruffTech Jun 9 '10 at 22:33
Your edit didn't help. – Ignacio Vazquez-Abrams Jun 10 '10 at 6:19
Sounds more like you are asking us for permission. In that case, yeah, go ahead! If your question is more technical, please expand the description of your problem (if any). – Allen Jul 17 '10 at 14:27

1 Answer

up vote 0 down vote accepted

iptables with the owner match should work.

iptables -A OUTPUT -m owner --cmd-owner "/usr/local/bin/app" -j DROP

There's also a --pid-owner if your kernel doesn't support cmd-owner or you really mean one process as opposed to any process of an app. --uid-owner may also meet your needs.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.