I have a VM with Linux and the TBB installed on it. What I am trying to do is to make sure that other applications like for example operating system applications cannot "phone home" while I am using TBB (not talking about malware and so on).

I am aware of Transparent Proxy setups that route all traffic through Tor, Whonix etc. But I am talking about simply stopping stuff like software updaters, package usage analysis and so on from making internet connections without having to manually uninstall it all (and maybe forget some application).

So I have been thinking about the following.

Make your own tor-group with:

groupadd -r tbb

Add your current user (me) to that group with:

usermod -a -G tbb me

Use iptables to only allow traffic for that group like this:

iptables -A OUTPUT -j ACCEPT -m owner --gid-owner tbb
iptables -A INPUT -j ACCEPT -m state --state ESTABLISHED
iptables -P OUTPUT DROP
iptables -P INPUT DROP

ip6tables -P OUTPUT DROP
ip6tables -P INPUT DROP
ip6tables -P FORWARD DROP

Then start Tor Browser with

sg tbb -c './start-tor-browser'

Is this something that could be done or will this open up security issues I am not aware of (maybe something in connection with NTP)?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.