Create a Security & Privacy plug [$515]

[Cody Garver]

There should be a plug for easy configuration of the firewall ( in this case I would suggest ufw). Normaly there is no need for a firewall, but if you wan't to e.g host a server, such a plug would really help you.

https://sites.google.com/site/codygarver/firewall.png

A privacy/security plug should also handle managing zeitgeist, screen lock options, and maybe stuff like keyring management and ssh keys

[Avi Romanoff (aroman)]

If you'll stop by #elementary-dev sometime, I or some of the other developers would be more than happy to help you write the plug.

I've started documenting switchboard here: http://elementaryos.org/docs/apis/switchboard

Albeit unfinished, it might be helpful :)

[Eduard Gotwig (gotwig)]

I start working on this, this weekend.

I took a look at gufw, and I have to say that they very much complicated the task to solve such an "easy" problem.

You are able to control ufw completly for terminal, btw.

[Sergey "Shnatsel" Davidoff (shnatsel)]

Sounds like firewalld is more appropriate for this use case. Just sayin'.

[Eduard Gotwig (gotwig)]

There are no packages available for it, at all.

[Sergey "Shnatsel" Davidoff (shnatsel)]

Oh, it will be fixed eventually. Even I can fix that.

[Eduard Gotwig (gotwig)]

You don't understand the problem. There could the chance to use iptables, that would give the user the most functions.

[Sergey "Shnatsel" Davidoff (shnatsel)]

Firewalld provides an abstraction layer to ip*tables and ebtables, and also seems to allow editing "raw" configs. But first, does your target audience need the power of iptables? What exactly will the plug do?

[Salvatore Merone (sal-merone)]

Why don't you use iptables? I don't know ufw, but iptables is highly customizable and allows a great number of rules to be applied.

Also, even if i like the "main switch" for the Firewall, we need to lock the entire plug like we do with Accounts Switchboard Plug.

[Danielle Foré (danrabbit)]

Adjusted the scope of the bug. Probably better to have a more thorough privacy/secuirty plug than a plug that only handles firewall

[Danielle Foré (danrabbit)]

Bounty on Bountysource: https://www.bountysource.com/issues/1431145-create-a-firewall-plug

[Harvey Cabaguio (harveycabaguio)]

Initial design

[No Name (nonamenoname)]

I don't think we should expose firewall settings. It makes only sense if we whitelist applications. Therefore we have to deny all connections and keep a list of exceptions. If i remove Empathy from the list, i won't be able to use messaging anymore. What about third-party applications connecting to random ports? What about P2P networking?
What rules should be present?

[Corentin Noël (tintou)]

Firewall settings are needed for only few people, most people have it integrated into the "Box" from their Internet Provider, but they are needed.
Firewall won't deny connection from an application but from a port and protocol.
My current implementation relies on Uncomplicated FireWall that is present in Ubuntu by default.

[Danielle Foré (danrabbit)]

Alright so we have it in the daily and we've posted about it to the dev community. The only bugs filed are minor or cosmetic so I'm gonna go ahead and mark this as fixed and we can catch any issues during beta