github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #192] --net=eth0 does not assign ipv6 #134

New issue

Closed

opened 2026-05-05 05:08:30 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 05:08:30 -06:00

Owner

Originally created by @the8472 on GitHub (Dec 15, 2015).
Original GitHub issue: https://github.com/netblue30/firejail/issues/192

I have tried firejail --noprofile --net=eth0 "/sbin/ip addr show" on an ipv6-enabled network with a public prefix available via router advertisement.

Is there a way to get it to assign a new v6 address to the ethernet besides the v4 one?

Originally created by @the8472 on GitHub (Dec 15, 2015). Original GitHub issue: https://github.com/netblue30/firejail/issues/192 I have tried `firejail --noprofile --net=eth0 "/sbin/ip addr show"` on an ipv6-enabled network with a public prefix available via router advertisement. Is there a way to get it to assign a new v6 address to the ethernet besides the v4 one?

gitea-mirror

2026-05-05 05:08:30 -06:00

closed this issue
added the
enhancement
label

gitea-mirror commented

2026-05-05 05:08:36 -06:00

Author

Owner

@netblue30 commented on GitHub (Dec 16, 2015):

There is no support for configuring IPv6 in this moment. I'll add it in a future version.

@netblue30 commented on GitHub (Dec 16, 2015): There is no support for configuring IPv6 in this moment. I'll add it in a future version.

gitea-mirror commented

2026-05-05 05:08:39 -06:00

Author

Owner

@the8472 commented on GitHub (Jan 3, 2016):

hrrm, it looks like --netfilter also does not apply v6 rules. This may be in a jail with a macvlan device where the device somehow obtains a v6 link-local address one way or another (dhcp client, auto-discovery).

In other words, security may be less tight than expected in some scenarios.

@the8472 commented on GitHub (Jan 3, 2016): hrrm, it looks like `--netfilter` also does not apply v6 rules. This may be in a jail with a macvlan device where the device somehow obtains a v6 link-local address one way or another (dhcp client, auto-discovery). In other words, security may be less tight than expected in some scenarios.

gitea-mirror commented

2026-05-05 05:08:43 -06:00

Author

Owner

@netblue30 commented on GitHub (Jan 3, 2016):

Yes, ipv6 support should also include netfilter, thanks!

@netblue30 commented on GitHub (Jan 3, 2016): Yes, ipv6 support should also include netfilter, thanks!

gitea-mirror commented

2026-05-05 05:08:44 -06:00

Author

Owner

@netblue30 commented on GitHub (Jan 14, 2016):

Fixed! New options: --ip6, --netfilter6

@netblue30 commented on GitHub (Jan 14, 2016): Fixed! New options: --ip6, --netfilter6

gitea-mirror commented

2026-05-05 05:08:47 -06:00

Author

Owner

@the8472 commented on GitHub (Jan 14, 2016):

thanks

@the8472 commented on GitHub (Jan 14, 2016): thanks

gitea-mirror referenced this issue

2026-05-05 10:03:23 -06:00

[PR #134] [MERGED] Fix warnings by clang-analyzer (scan-build) #3546

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#134

No description provided.

Rows
Columns