Bug#909567: ITP: opensnitch -- Port of the Little Snitch application firewall

[Chris Lamb]

Package: wnpp
Severity: wishlist
Owner: la...@debian.org
X-Debbugs-CC: debian...@lists.debian.org

* Package name : opensnitch
Version : 0~git20180913+e9c10b9-1
Upstream Author : Simone "evilsocket" Margaritelli <evils...@protonmail.com>
* URL : https://opensnitch.io/
* License : GPL-3
Programming Lang: Go / Python (Qt)
Description : Port of the Little Snitch application firewall

OpenSnitch works on the same principles of the macOS version, being a
host-based firewall that notifies users when local apps are attempting to
initiate new outgoing network connections.

When this happens, OpenSnitch will display a popup, asking the user for
instructions on how to deal with this new process.

All user decisions are saved as rules in local JSON files. Users can edit
these rules later to fine-tune the firewall or import/export rules from/to
other systems.


Regards,

--
,''`.
: :' : Chris Lamb
`. `'` la...@debian.org / chris-lamb.co.uk
`-

[jonathan vlan]

hola opensnitch package, for debian buster ,  works perfectly in debian buster , parrot os , kali linux .  /  I have not tried it on debian stretch or on ubuntu

Need installation of :

apt-get install  libnetfilter-queue1 libnetfilter-conntrack3 python3-slugify python-pyqt5 libc6 python3.7

Package : opensnitch_1.0.deb

https://sourceforge.net/projects/unknownos/files/opensnitch/

sorry for my bad english

[Harald Dunkel]

Upstream seems to provide Debian support:

https://github.com/evilsocket/opensnitch/tree/master/debian

[Paul Wise]

Control: noowner -1
Control: retitle -1 RFP: opensnitch -- Port of the Little Snitch application firewall

On Tue, 25 Sep 2018 12:09:36 +0100 Chris Lamb wrote:

> Owner: la...@debian.org

On GitHub @lamby wrote:

> https://github.com/evilsocket/opensnitch/issues/304#issuecomment-748457182
>
> That's probably where I left off, yes. I do not intend to continue, however. 👍

Consequently I'm updating the title/owner of the opensnitch wnpp bug.

--
bye,
pabs

https://wiki.debian.org/PaulWise

[Alias]

As of the most recent Opensnitch release, I would consider it production ready. This would be a great application to have available in Debian.

How would one go about becoming a package maintainer?

On Sun, 12 Sep 2021 13:30:36 +0800 Paul Wise <pa...@debian.org> wrote:
> Control: noowner -1

> Control: retitle -1 RFP: opensnitch -- Port of the Little Snitch application firewall

[Hans-Christoph Steiner]

Hey aliasarmor,

It would be great to have you as the package maintainer! I'm a Debian Developer
and can mentor you through the process. The first step is to get it building on
Debian unstable. Then get it building with only packages from Debian. Looks
like lamby started that process here:

https://salsa.debian.org/lamby/pkg-opensnitch

More info here
https://github.com/evilsocket/opensnitch/issues/304

[Petter Reinholdtsen]

I would be happy to assist too, if you need help. Ping me on IRC, for
example.

My sponsoring preferences are available from
<URL: http://www.hungry.com/~pere/debian-sponsoring.html >.
--
Happy hacking
Petter Reinholdtsen

[Petter Reinholdtsen]

Just for fun, I tried to build the source from Chris on Bullseye, but it
had a few issues. I cloned it to
<URL: https://salsa.debian.org/debian/pkg-opensnitch.git > and applied a
few fixed to get it to build. Sadly it is not working.

The opensnitch daemon fail to start with the following message in
/var/log/opensnitchd.log:

2023-01-19 21:56:02] IMP Starting opensnitch-daemon v1.0.0b
[2023-01-19 21:56:03] !!! Error while enabling probe descriptor for opensnitch_exec_probe: write /sys/kernel/debug/tracing/kprobe_events: no such file or directory

The opensnitch-ui program fail to start with this error:

Traceback (most recent call last):
File "/usr/bin/opensnitch-ui", line 38, in <module>
service = UIService(app, on_exit, args.config)
File "/usr/lib/python3/dist-packages/opensnitch/service.py", line 52, in __init__
self._setup_interfaces()
File "/usr/lib/python3/dist-packages/opensnitch/service.py", line 72, in _setup_interfaces
namestr = names.tostring()
AttributeError: 'array.array' object has no attribute 'tostring'

I further tried to build the latest upstream source after importing it
using uscan and gbp import-orig, but could not get it to build. Do not
know the Go language enough to debug this, but I suspect the issue is
new dependencies missing in Debian.

[Petter Reinholdtsen]

For the record, I am in touch with upstream and helping him get the
1.5.0 branch ready to upload into Debian.

[Petter Reinholdtsen]

Version 1.5.2.1-1 was just uploaded to NEW based on the upstream git
repo. I expect other uploads will be taken to improve the situation
further. This was primary to get a slot in the NEW queue.

[Petter Reinholdtsen]

[Petter Reinholdtsen]

> Just for fun, I tried to build the source from Chris on Bullseye, but it
> had a few issues. I cloned it to
> <URL: https://salsa.debian.org/debian/pkg-opensnitch.git > and applied a
> few fixed to get it to build. Sadly it is not working.

Just for the record, as the package git repo currently is the upstream
repo at github, and the plan is to move the Debian packaging to the
golang team, I got the git repo
<URL: https://salsa.debian.org/debian/pkg-opensnitch.git > removed. All
relevant Debian packaging parts where already in upstreams repo.

[Alias]

On lintian warnings - I can adapt the project's github wiki pages into man pages, if necessary.

https://udd.debian.org/lintian/?packages=opensnitch

[Petter Reinholdtsen]

[Alias]

> On lintian warnings - I can adapt the project's github wiki pages into
> man pages, if necessary.
> <https://udd.debian.org/lintian/?packages=opensnitch>

Writing man pages sound like something best handled upstream. Perhaps
you can submit patches there?