Create a Security & Privacy plug [$515]

If you'll stop by #elementary-dev sometime, I or some of the other developers would be more than happy to help you write the plug.

I've started documenting switchboard here: http://elementaryos.org/docs/apis/switchboard

Albeit unfinished, it might be helpful :)

I start working on this, this weekend.

I took a look at gufw, and I have to say that they very much complicated the task to solve such an "easy" problem.

You are able to control ufw completly for terminal, btw.

Sounds like firewalld is more appropriate for this use case. Just sayin'.

There are no packages available for it, at all.

Oh, it will be fixed eventually. Even I can fix that.

You don't understand the problem. There could the chance to use iptables, that would give the user the most functions.

Firewalld provides an abstraction layer to ip*tables and ebtables, and also seems to allow editing "raw" configs. But first, does your target audience need the power of iptables? What exactly will the plug do?

Why don't you use iptables? I don't know ufw, but iptables is highly customizable and allows a great number of rules to be applied.

Also, even if i like the "main switch" for the Firewall, we need to lock the entire plug like we do with Accounts Switchboard Plug.

Adjusted the scope of the bug. Probably better to have a more thorough privacy/secuirty plug than a plug that only handles firewall

Bounty on Bountysource: https://www.bountysource.com/issues/1431145-create-a-firewall-plug

Initial design

I don't think we should expose firewall settings. It makes only sense if we whitelist applications. Therefore we have to deny all connections and keep a list of exceptions. If i remove Empathy from the list, i won't be able to use messaging anymore. What about third-party applications connecting to random ports? What about P2P networking?
What rules should be present?

Firewall settings are needed for only few people, most people have it integrated into the "Box" from their Internet Provider, but they are needed.
Firewall won't deny connection from an application but from a port and protocol.
My current implementation relies on Uncomplicated FireWall that is present in Ubuntu by default.

Alright so we have it in the daily and we've posted about it to the dev community. The only bugs filed are minor or cosmetic so I'm gonna go ahead and mark this as fixed and we can catch any issues during beta