Update Linux Quarantine Artifact #4203

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Open

FabFaeb wants to merge 2 commits into Velocidex:master from FabFaeb:master

+63 −18

Contributor

FabFaeb commented Apr 23, 2025

As discussed with @scudette in Discord a few days ago (https://discord.com/channels/624244632552734750/865024982399320114/1361237945624821860) this PR implements a few updates to the Linux Quarantine Artifact:

add a check whether a connection to a "forbidden" URL can be made on a quarantined system
make the artifact fail when one of the checks at the end fail (by logging an error)
add two nft rules for localhost to allow DNS resolution on ubuntu based systems
update the order of executed commands to reflect on these changes

Please feel free to comment or directly update!

FabFaeb added 2 commits

April 22, 2025 16:25


          add forbidden check, improve logging

877af78


          update artifact

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet