[GH-ISSUE #4687] Error ioctl: interface.c:302 net_if_mac: Operation not supported when using wifi interface with Unicast MAC #2749

Open
opened 2026-05-05 09:24:52 -06:00 by gitea-mirror · 1 comment
Owner

Originally created by @svc88 on GitHub (Nov 14, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4687

Description

This issue only occurs when using a Unicast MAC address on wireless interface.
If you remove the --mac completely, it will execute the xterm just fine.

Steps to Reproduce

firejail --net="wlp3s0" --dns="1.1.1.1" --mac="EA:29:F8:92:B6:7C" xterm

Expected behavior

I expect to be able to use wireless interface wlp3s0 with a random MAC address just as im able to do it on a normal eth0 interface.

Actual behavior

Reading profile /usr/local/etc/firejail/default.profile
Reading profile /usr/local/etc/firejail/disable-common.inc
Reading profile /usr/local/etc/firejail/disable-passwdmgr.inc
Reading profile /usr/local/etc/firejail/disable-programs.inc

** Note: you can use --noprofile to disable default.profile **

Parent pid 3477, child pid 3478
Error ioctl: interface.c:302 net_if_mac: Operation not supported
Error: failed to run /run/firejail/lib/fnet, exiting...
Error: proc 3477 cannot sync with peer: unexpected EOF
Peer 3478 unexpectedly exited with status 1

Behavior without a profile

nothing changed.

Environment

  • Ubuntu 18.04
  • Firejail version 0.9.66

Checklist

  • The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
  • I can reproduce the issue without custom modifications (e.g. globals.local).
  • The program has a profile. (If not, request one in https://github.com/netblue30/firejail/issues/1139)
  • The profile (and redirect profile if exists) hasn't already been fixed upstream.
  • I have performed a short search for similar issues (to avoid opening a duplicate).
    • I'm aware of browser-allow-drm yes/browser-disable-u2f no in firejail.config to allow DRM/U2F in browsers.
  • I used --profile=PROFILENAME to set the right profile. (Only relevant for AppImages)
Originally created by @svc88 on GitHub (Nov 14, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4687 ### Description This issue only occurs when using a Unicast MAC address on wireless interface. If you remove the `--mac` completely, it will execute the xterm just fine. ### Steps to Reproduce `firejail --net="wlp3s0" --dns="1.1.1.1" --mac="EA:29:F8:92:B6:7C" xterm` ### Expected behavior I expect to be able to use wireless interface wlp3s0 with a random MAC address just as im able to do it on a normal eth0 interface. ### Actual behavior ``` Reading profile /usr/local/etc/firejail/default.profile Reading profile /usr/local/etc/firejail/disable-common.inc Reading profile /usr/local/etc/firejail/disable-passwdmgr.inc Reading profile /usr/local/etc/firejail/disable-programs.inc ** Note: you can use --noprofile to disable default.profile ** Parent pid 3477, child pid 3478 Error ioctl: interface.c:302 net_if_mac: Operation not supported Error: failed to run /run/firejail/lib/fnet, exiting... Error: proc 3477 cannot sync with peer: unexpected EOF Peer 3478 unexpectedly exited with status 1 ``` ### Behavior without a profile nothing changed. ### Environment - Ubuntu 18.04 - Firejail version 0.9.66 ### Checklist <!-- Note: Items are checked with an "x", like so: - [x] This is a checked item. --> - [x] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [ ] I can reproduce the issue without custom modifications (e.g. globals.local). - [ ] The program has a profile. (If not, request one in `https://github.com/netblue30/firejail/issues/1139`) - [ ] The profile (and redirect profile if exists) hasn't already been fixed [upstream](https://github.com/netblue30/firejail/tree/master/etc). - [x] I have performed a short search for similar issues (to avoid opening a duplicate). - [ ] I'm aware of `browser-allow-drm yes`/`browser-disable-u2f no` in `firejail.config` to allow DRM/U2F in browsers. - [ ] I used `--profile=PROFILENAME` to set the right profile. (Only relevant for AppImages)
gitea-mirror added the
networking
label 2026-05-05 09:24:52 -06:00
Author
Owner

@svc88 commented on GitHub (Nov 14, 2021):

https://github.com/netblue30/firejail/issues/3000 could possibly be a duplicate, as the OP did not mention if he was using --mac, so not sure as he also didnt post a log of the output. Either way, the issue persists with --mac option

<!-- gh-comment-id:968372595 --> @svc88 commented on GitHub (Nov 14, 2021): https://github.com/netblue30/firejail/issues/3000 could possibly be a duplicate, as the OP did not mention if he was using --mac, so not sure as he also didnt post a log of the output. Either way, the issue persists with --mac option
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2749
No description provided.