evilsocket/opensnitch v1.8.0

on GitHub

Important changes of this release

GUI migrated to PyQt6 #1222

• We've migrated the GUI to PyQt6 because PyQt5 has been deprecated, and many distros have started to remove it.
  ⚠️ This means that starting with v1.8.0, the GUI is no longer compatible by default with the following distros:

  • LinuxMint 21.2 or earlier.
  • Ubuntu 22.04 or earlier.
  • OpenSuse 15.5 or earlier (it works on 15.6, but you'll have to install some packages manually).

  The GUI still works if you install the packages manually with pip, and there will be a flatpak version soon.
  On the other hand, the daemon v1.8.0 should work fine with GUI v1.7.2.

Firewall rules grouped into one table, by @alice945 #1423

• Now all our firewall rules (netfilter rules) are grouped under one table called opensnitch.
  Previously we added several tables like mangle, output, input, prerouting, etc.
• If you have added system firewall rules, or if you have changed the firewall policies, apt will prompt you to update it.
  For rpm based distros you'll have to update it manually if needed.

What has changed

Daemon

• Use application specific nft table by @alice945 in #1423

• daemon/audit: allow configuring audispd_events socket path by @LordGrimmauld in #1418

• mount tracefs path if it's not mounted: #1450 , fbc72bb.

• Tasks (WIP):

  • Allow to load tasks from disk: 66ee50b
    New task IOCScanner: 1673856 README
    New downloader task: 149e0f6

• Generic improvements: 2c3120b, c719c34, 906ad17,

• Multi-node improvements: 9b33f7b,

• Performance improvements: 481dc1c, 7a0c96c

• Better tasks monitoring (process dialog, netstat, node monitoring): 8563505

GUI (server)

• Ported to PyQt6: #1009 e5d1702
• Update generate_i18n.sh - find lrelease by @munix9 in #1411
• ui: switch to python-slugify by @LordGrimmauld in #1413
• fix: restore maximized window state correctly when loading dialog geometry by @ryan-steed-usa in #1458
• Better desktop notifications: ad0df38
• Multi-node improvements: 90dfba1, 321c152, 74a7cb8, e7c36e2, e9f6468, 4729e6d, be03767, 8ac02ac, f1a04dd, 09bb7e5, 12d523b, 6f72bd1, a0bb7b6, 76f4edc,
• Allow configuring server's max workers and clients: #1453, c356c82, ada74a2.
• Better rows handling: #1428 427b37c, #1419 4f64e04,
• Pop-ups: Allow to select automatically snapd paths: #1439 339c660
• Fixed restoring maximized state: 6cd5af5

Plugins:

• New plugin version checker: #1461 58c3794

Known issues

• It seems that on some new kernels 6.17.x, we fail to create system firewall rules with some verdicts (reject, log, quota, ...)
  We'll have to investigate it.
  528091f

Downloads

You need to download the daemon and the GUI.

GUI

IMPORTANT NOTES:

Ubuntu 22.04 / PopOS! 22.x / LinuxMint 21.x / Elementary OS 7.x / Zorin users: the GUI is no longer compatible with these distributions.
See this comment after installing the GUI: #1214 (comment))

If you experience crashes on Wayland clicking on the pop-ups: open the Preferences and select "xcb" as the "Qt platform plugin", in the UI tab.`

• rpm
• deb

daemon

(NOTE: if the daemon doesn't autostart, you need to enable it: ~ $ sudo systemctl enable --now opensnitch.service)

• deb x86_64
• rpm x86_64

New Contributors

• @LordGrimmauld made their first contribution in #1413
• @alice945 made their first contribution in #1423
• @ryan-steed-usa made their first contribution in #1458

Full Changelog: v1.7.2...v1.8.0