mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #1960] Cruzin' the net with --net=none #1313
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#1313
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @charliemb2 on GitHub (May 26, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1960
This appears to be a bug, and if it's a bug it is the last bug I thought I've have to report.
Here's what I'm seeing; I can cruse the internet fully and without restriction with a Firefox instance started by either:
The only mitigating factor that I can think of is that I'm also running another instance of firefox unsandboxed by filejail, if that matters.
Versions:
I didn't see mention of --net=none dysfunction in any other topic
@reinerh commented on GitHub (May 26, 2018):
That's exactly the problem. You are only opening another window of the already running instance.
See also: https://firejail.wordpress.com/support/#firefox
@charliemb2 commented on GitHub (May 26, 2018):
Thanks.
Indeed, I see only a single instance of firefox in the system monitor.
I was under the impression that firefox was now sandboxed. It is in Windows and there I see separate processes.
Will "firejail --net=none" start working independently of other firefox instances when firefox becomes sandboxed at some point in Linux?
@SkewedZeppelin commented on GitHub (May 26, 2018):
firejail --private --net=none /usr/bin/firefox --no-remoteis what you need if you want to run a new instance while an existing one (sandboxed or not) is running@charliemb2 commented on GitHub (May 26, 2018):
Thanks SkewedZeppelin - That worked!