github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #2061] [cosmetic] `--netfilter6=` and `restricted-network yes` #1391

New issue

Closed

opened 2026-05-05 08:02:28 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 08:02:28 -06:00

Owner

Originally created by @yumkam on GitHub (Jul 24, 2018).
Original GitHub issue: https://github.com/netblue30/firejail/issues/2061

Originally assigned to: @startx2017 on GitHub.

When restricted-network yes (or similar compile-time option) is set, --netfilter= is rejected (Error: --netfilter is only allowed for root), but --netfilter6= is not. Fortunately, it is no-op in this case: only --net=none is allowed, and --netfilter6= is ignored when no bridges are configured (still, it would be better to be consistent, one way or other).

Originally created by @yumkam on GitHub (Jul 24, 2018). Original GitHub issue: https://github.com/netblue30/firejail/issues/2061 Originally assigned to: @startx2017 on GitHub. When `restricted-network yes` (or similar compile-time option) is set, `--netfilter=` is rejected (`Error: --netfilter is only allowed for root`), but `--netfilter6=` is not. Fortunately, it is no-op in this case: only `--net=none` is allowed, and `--netfilter6=` is ignored when no bridges are configured (still, it would be better to be consistent, one way or other).

gitea-mirror

2026-05-05 08:02:28 -06:00

closed this issue
added the
bug
label

gitea-mirror commented

2026-05-05 08:02:35 -06:00

Author

Owner

@startx2017 commented on GitHub (Jul 25, 2018):

Same problem for --netns and for all netfilter commands in profile files. I'm working on a fix. I intend to remomve --enable-network=restricted from configure.ac script, and clean up the code.

@startx2017 commented on GitHub (Jul 25, 2018): Same problem for --netns and for all netfilter commands in profile files. I'm working on a fix. I intend to remomve --enable-network=restricted from configure.ac script, and clean up the code.

gitea-mirror commented

2026-05-05 08:02:37 -06:00

Author

Owner

@startx2017 commented on GitHub (Jul 26, 2018):

the fix is in, thanks for the bug.

@startx2017 commented on GitHub (Jul 26, 2018): the fix is in, thanks for the bug.

gitea-mirror commented

2026-05-05 08:02:40 -06:00

Author

Owner

@yumkam commented on GitHub (Jul 26, 2018):

If someone still relied on this compile-time option, it will be very nasty surprise for them (as --enable-network=restricted is now seems exactly equivalent to --enable-network).

@yumkam commented on GitHub (Jul 26, 2018): If someone still relied on this compile-time option, it will be very nasty surprise for them (as `--enable-network=restricted` is now seems exactly equivalent to `--enable-network`).

gitea-mirror referenced this issue

2026-05-05 08:24:39 -06:00

[GH-ISSUE #2768] join-or-start on multi-user systems #1738

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#1391

No description provided.

Rows
Columns

[GH-ISSUE #2061] [cosmetic] --netfilter6= and restricted-network yes #1391

[GH-ISSUE #2061] [cosmetic] `--netfilter6=` and `restricted-network yes` #1391