mobility and firewall

[Christoph Georgi]

Michael R Head wrote:
<snip>
>>
>>>$IPTABLES -A OUTPUT -p TCP --dport http -m owner --cmd-owner firefox -j 
>>>ACCEPT
>>>
>>>$IPTABLES -A OUTPUT -p TCP --dport http -m owner --cmd-owner firefox-bin 
>>>-j ACCEPT
>>>

<snip>

> 
> Still, it's not very helpful unless it uses the full path to the
> executable. 
> 
> 

AFAIK it's taking the process name of the running process as one can see 
it with 'netstat -p'. No full path required...

christoph
-- 


Christoph Georgi
-----------------------------
email.  christoph.georgi at web.de
fon.	+64 (0)9 815 8259

registered linux user #380268
ubuntu 5.04 (ubuntu.com)