Use Tetragon to Limit Network Usage for a set of Binary

• tetragon

  11 3,724 9.9 Go

  eBPF-based Security Observability and Runtime Enforcement

  

  Many interesting software are coming from the community, many are distributed through the package manager of the operating system. But for the others, you can download them from Github release pages, use snap or homebrew to cite a few. But this last installation method bypasses the security team that tries to improve the security of your operating system. By doing so, you are implicitly trusting the author he is not distributing malware or implementing backdoors. How many tools did you install by hand? Do you really trust all of them? Confidence is very important, yet it would be nice to limit capabilities for a set of binary that you don't fully trust. In this blog post, we will use Tetragon to forbid network usage for tools that don't need to.

• SaaSHub

  www.saashub.com featured

  SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

  

• jq

  75 30,918 8.1 C

  Command-line JSON processor

  

  jq

• k9s

  147 27,949 9.1 Go

  🐶 Kubernetes CLI To Manage Your Clusters In Style!

  k9s

• jless

  37 4,849 3.4 Rust

  jless is a command-line JSON viewer designed for reading, exploring, and searching through JSON data.

  jless

• yq

  70 12,610 9.1 Go

  yq is a portable command-line YAML, JSON, XML, CSV, TOML and properties processor

  yq

• helm

  242 27,302 9.5 Go

  The Kubernetes Package Manager

  

  helm

Suggest a related project