github/portmaster
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Enhance default connection settings for Portmaster UI profile to block all connections, ensuring only necessary connections to Portmaster Core are allowed.

Browse Source
This commit is contained in:
Alexandr Stelnykovych
2025-05-21 18:12:50 +03:00
parent 11c4ae39d2
commit 3b91aa06ba
1 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
service/profile/special.go
View File

@@ -237,14 +237,20 @@ func createSpecialProfile(profileID string, path string) *Profile {
Source: SourceLocal,
PresentationPath: path,
Config: map[string]interface{}{
// Block all connections by default for the Portmaster UI profile,
// since the only required connections are to the Portmaster Core,
// which are fast-tracked.
//
// This ensures that any unexpected connections —
// possibly made by the internal WebView implementation —
// are blocked.
CfgOptionDefaultActionKey: DefaultActionBlockValue,
CfgOptionBlockScopeInternetKey: false,
CfgOptionBlockScopeLANKey: false,
CfgOptionBlockScopeLocalKey: false,
CfgOptionBlockP2PKey: false,
CfgOptionBlockScopeInternetKey: true,
CfgOptionBlockScopeLANKey: true,
CfgOptionBlockScopeLocalKey: true,
CfgOptionBlockP2PKey: true,
CfgOptionBlockInboundKey: true,
CfgOptionEndpointsKey: []string{
"+ Localhost",
"+ .safing.io",
},
},