Overview
- Objective Development released a free Linux edition of Little Snitch with support confirmed for kernel 6.12 or newer.
- The tool uses eBPF inside the kernel with a Rust backend and a browser-based interface that allows remote monitoring from another device.
- The kernel code and UI are GPLv2 on GitHub, but the rule-managing daemon is proprietary, a split that has drawn criticism from FOSS advocates who prefer fully open tools like OpenSnitch.
- Objective Development says it is not a security hardening product because eBPF limits, such as small caches and capped instruction counts, can drop links between traffic and processes under heavy load.
- The web interface is open to local processes by default, so enabling authentication and TLS is advised before exposing it beyond the loopback interface.