[opensuse] preventing programs from accessing the net