I have a VM with Linux and the TBB installed on it. What I am trying to do is to make sure that other applications like for example operating system applications cannot "phone home" while I am using TBB (not talking about malware and so on).
I am aware of Transparent Proxy setups that route all traffic through Tor, Whonix etc. But I am talking about simply stopping stuff like software updaters, package usage analysis and so on from making internet connections without having to manually uninstall it all (and maybe forget some application).
So I have been thinking about the following.
Make your own tor-group with:
groupadd -r tbb
Add your current user (me) to that group with:
usermod -a -G tbb me
Use iptables to only allow traffic for that group like this:
iptables -A OUTPUT -j ACCEPT -m owner --gid-owner tbb iptables -A INPUT -j ACCEPT -m state --state ESTABLISHED iptables -P OUTPUT DROP iptables -P INPUT DROP ip6tables -P OUTPUT DROP ip6tables -P INPUT DROP ip6tables -P FORWARD DROP
Then start Tor Browser with
sg tbb -c './start-tor-browser'
Is this something that could be done or will this open up security issues I am not aware of (maybe something in connection with NTP)?