mawei/agnos-builder
1
0
Fork 0
mirror of https://github.com/commaai/agnos-builder.git synced 2026-07-09 08:42:03 +08:00
Code Issues Packages Projects Releases Wiki Activity

iptables: block incoming wwan0 traffic (#45)

Browse Source
This commit is contained in:
Willem Melching
2022-02-07 18:54:58 +01:00
committed by GitHub
parent 267f1385a0
commit 99ba7a6565
3 changed files with 42 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Dockerfile.agnos
+3
View File
@@ -169,6 +169,9 @@ COPY ./userspace/files/disable_bootkick.py /lib/systemd/system-shutdown/
# Remove qt network bearer plugins
RUN rm -rf /usr/lib/aarch64-linux-gnu/qt5/plugins/bearer
# Add iptable rules to block incoming traffic on wwan0
COPY ./userspace/etc/iptables/rules.v4 /etc/iptables/rules.v4
# HACK: get newer version of ModemManager and libqmi from 21.04
# ModemManager 1.12.8 suffers from a bug with reconnecting: https://gitlab.freedesktop.org/mobile-broadband/ModemManager/-/issues/242
# libqmi 1.24.8 segfaults when power cycling the modem: https://gitlab.freedesktop.org/mobile-broadband/libqmi/-/issues/37
userspace/base_setup.sh
+1
View File
@@ -64,6 +64,7 @@ apt-get install --no-install-recommends -yq \
i2c-tools \
ifmetric \
ifupdown \
iptables-persistent \
jq \
landscape-common \
libi2c-dev \
userspace/etc/iptables/rules.v4
+38
View File
@@ -0,0 +1,38 @@
# Generated by iptables-save v1.8.4 on Mon Feb 7 10:32:25 2022
*security
:INPUT ACCEPT [1423:898759]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1107:236517]
COMMIT
# Completed on Mon Feb 7 10:32:25 2022
# Generated by iptables-save v1.8.4 on Mon Feb 7 10:32:25 2022
*raw
:PREROUTING ACCEPT [1428:899551]
:OUTPUT ACCEPT [1107:236517]
COMMIT
# Completed on Mon Feb 7 10:32:25 2022
# Generated by iptables-save v1.8.4 on Mon Feb 7 10:32:25 2022
*nat
:PREROUTING ACCEPT [23:4024]
:INPUT ACCEPT [18:3232]
:OUTPUT ACCEPT [105:7766]
:POSTROUTING ACCEPT [105:7766]
COMMIT
# Completed on Mon Feb 7 10:32:25 2022
# Generated by iptables-save v1.8.4 on Mon Feb 7 10:32:25 2022
*mangle
:PREROUTING ACCEPT [1428:899551]
:INPUT ACCEPT [1425:898847]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1107:236517]
:POSTROUTING ACCEPT [1107:236517]
COMMIT
# Completed on Mon Feb 7 10:32:25 2022
# Generated by iptables-save v1.8.4 on Mon Feb 7 10:32:25 2022
*filter
:INPUT ACCEPT [947:820457]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [664:78649]
-A INPUT -i wwan0 -j DROP
COMMIT
# Completed on Mon Feb 7 10:32:25 2022