github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #458] "--net=none" equivalent for profiles #327

New issue

Closed

opened 2026-05-05 05:36:18 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 05:36:18 -06:00

Owner

Originally created by @Fred-Barclay on GitHub (Apr 19, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/458

When starting a program from the command line, we have the option to disallow all network access:
firejail --net=none some_programme
But what if we wanted to integrate this with the programme profile so that networking was automatically disabled? Is there a option for this?
So for example:
...
seccomp
caps.drop all
NO NETWORK
noroot
...

Is this possible?

Originally created by @Fred-Barclay on GitHub (Apr 19, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/458 When starting a program from the command line, we have the option to disallow all network access: `firejail --net=none some_programme` But what if we wanted to integrate this with the programme profile so that networking was automatically disabled? Is there a option for this? So for example: `...` `seccomp` `caps.drop all` `NO NETWORK` `noroot` `...` Is this possible?

gitea-mirror closed this issue

2026-05-05 05:36:19 -06:00

gitea-mirror commented

2026-05-05 05:36:22 -06:00

Author

Owner

@nick75e commented on GitHub (Apr 19, 2016):

Hi!

Simply use net none.

EDIT:

net none
              Enable  a new, unconnected network namespace. The only interface
              available in the new namespace is a new loopback interface (lo).
              Use  this  option  to deny network access to programs that don't
              really need network access.

@nick75e commented on GitHub (Apr 19, 2016): Hi! Simply use `net none`. EDIT: ``` net none Enable a new, unconnected network namespace. The only interface available in the new namespace is a new loopback interface (lo). Use this option to deny network access to programs that don't really need network access. ```

gitea-mirror commented

2026-05-05 05:36:23 -06:00

Author

Owner

@Fred-Barclay commented on GitHub (Apr 19, 2016):

Thanks!
Where did you find that? I looked on the man page and poked around netblue's blog a little but couldn't find it.

@Fred-Barclay commented on GitHub (Apr 19, 2016): Thanks! Where did you find that? I looked on the man page and poked around netblue's blog a little but couldn't find it.

gitea-mirror commented

2026-05-05 05:36:25 -06:00

Author

Owner

@nick75e commented on GitHub (Apr 19, 2016):

here: https://firejail.wordpress.com/features-3/man-firejail-profile/
It's on his blog at the top, mouse over "FEATURES" then "MAN FIREJAIL-PROFILE".

@nick75e commented on GitHub (Apr 19, 2016): here: https://firejail.wordpress.com/features-3/man-firejail-profile/ It's on his blog at the top, mouse over "FEATURES" then "MAN FIREJAIL-PROFILE".

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#327

No description provided.

Rows
Columns