Is there an alternative for Linux or Windows?

[ProfessorManhattan]

Are there any alternatives to Santa for Linux or Windows?

[russellhancox]

I'm not aware of any open-source projects like Santa for Windows or Linux but there are several commercial offerings.
I know nothing about any of these other than they exist:

For Windows:

• Airlock
• Carbon Black Enterprise Protection (formerly Bit9)
• Microsoft Defender Application Control for Windows

For Linux:

• Airlock

[the123blackjack]

Hi Would consider SRP (Software Restriction Policies) on windows is what santa is on Mac.

Easy to use front end gui and configurators

1. Hard Configurator
2. Simple Software Restriction Policy

[angelorobo]

In 2024, is there a better alternative for app blocking in Windows or Linux?

[proximity666]

There is definitely real good one, but unfortunately from Broadcom/CATechnologies. Control Minder (now Symantec Privileged Identity Manager). It has broader functionality than Santa and it is really rather easy to deploy and manage ....

[pmarkowsky]

For Linux you have a bunch of solutions built on fanotify(7) e.g. fapolicyd

I'm not aware of any open-source projects like Santa for Windows or Linux but there are several commercial offerings. I know nothing about any of these other than they exist:

...
For Linux:

• Airlock

For Linux you most older / complete solutions are built on fanotify(7) e.g. fapolicyd. You can find documentation for it here.

Newer solutions on Linux can make use of eBPF and the KRSI Linux Security Module. However I'm unaware of an allowlisting product using it today.