[GH-ISSUE #1960] Cruzin' the net with --net=none #1313

Closed
opened 2026-05-05 07:51:04 -06:00 by gitea-mirror · 4 comments
Owner

Originally created by @charliemb2 on GitHub (May 26, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1960

This appears to be a bug, and if it's a bug it is the last bug I thought I've have to report.

Here's what I'm seeing; I can cruse the internet fully and without restriction with a Firefox instance started by either:

  • $ firejail --net=none firefox
  • $ firejail --noprofile --net=none firefox

The only mitigating factor that I can think of is that I'm also running another instance of firefox unsandboxed by filejail, if that matters.

Versions:

  • firejail version 0.9.38.10 (installed from Synaptic within Mint to stay as safe as recommended)
  • Linux Ming 18.3 Sylvia

I didn't see mention of --net=none dysfunction in any other topic

Originally created by @charliemb2 on GitHub (May 26, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/1960 This appears to be a bug, and if it's a bug it is the last bug I thought I've have to report. Here's what I'm seeing; I can cruse the internet fully and without restriction with a Firefox instance started by either: - $ firejail --net=none firefox - $ firejail --noprofile --net=none firefox The only mitigating factor that I can think of is that I'm also running another instance of firefox unsandboxed by filejail, if that matters. Versions: - firejail version 0.9.38.10 (installed from Synaptic within Mint to stay as safe as recommended) - Linux Ming 18.3 Sylvia I didn't see mention of --net=none dysfunction in any other topic
gitea-mirror 2026-05-05 07:51:04 -06:00
Author
Owner

@reinerh commented on GitHub (May 26, 2018):

The only mitigating factor that I can think of is that I'm also running another instance of firefox unsandboxed by filejail, if that matters.

That's exactly the problem. You are only opening another window of the already running instance.
See also: https://firejail.wordpress.com/support/#firefox

<!-- gh-comment-id:392277547 --> @reinerh commented on GitHub (May 26, 2018): > The only mitigating factor that I can think of is that I'm also running another instance of firefox unsandboxed by filejail, if that matters. That's exactly the problem. You are only opening another window of the already running instance. See also: https://firejail.wordpress.com/support/#firefox
Author
Owner

@charliemb2 commented on GitHub (May 26, 2018):

Thanks.

Indeed, I see only a single instance of firefox in the system monitor.
I was under the impression that firefox was now sandboxed. It is in Windows and there I see separate processes.

Will "firejail --net=none" start working independently of other firefox instances when firefox becomes sandboxed at some point in Linux?

<!-- gh-comment-id:392280568 --> @charliemb2 commented on GitHub (May 26, 2018): Thanks. Indeed, I see only a single instance of firefox in the system monitor. I was under the impression that firefox was now sandboxed. It is in Windows and there I see separate processes. Will "firejail --net=none" start working independently of other firefox instances when firefox becomes sandboxed at some point in Linux?
Author
Owner

@SkewedZeppelin commented on GitHub (May 26, 2018):

firejail --private --net=none /usr/bin/firefox --no-remote is what you need if you want to run a new instance while an existing one (sandboxed or not) is running

<!-- gh-comment-id:392281061 --> @SkewedZeppelin commented on GitHub (May 26, 2018): `firejail --private --net=none /usr/bin/firefox --no-remote` is what you need if you want to run a new instance while an existing one (sandboxed or not) is running
Author
Owner

@charliemb2 commented on GitHub (May 26, 2018):

Thanks SkewedZeppelin - That worked!

<!-- gh-comment-id:392285488 --> @charliemb2 commented on GitHub (May 26, 2018): Thanks SkewedZeppelin - That worked!
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1313
No description provided.