Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I want to run a process without network access but at a later time give access to the network.

The computer will have full network connection as all the other processes but I want to start just one process without network access. (I have already checked this process runs fine without networking)

share|improve this question
Can tell us a bit more about what you mean? Are you saying the computer will not be on the network at startup, but will become available later? – Zoredache Jun 9 '10 at 22:01
depends intirely on the process / software. Some software wont boot unless network connectivity is established. – GruffTech Jun 9 '10 at 22:33
Your edit didn't help. – Ignacio Vazquez-Abrams Jun 10 '10 at 6:19
Sounds more like you are asking us for permission. In that case, yeah, go ahead! If your question is more technical, please expand the description of your problem (if any). – Allen Jul 17 '10 at 14:27
up vote 0 down vote accepted

iptables with the owner match should work.

iptables -A OUTPUT -m owner --cmd-owner "/usr/local/bin/app" -j DROP

There's also a --pid-owner if your kernel doesn't support cmd-owner or you really mean one process as opposed to any process of an app. --uid-owner may also meet your needs.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.