github-starred/firejail

Fork 0

mirror of https://github.com/netblue30/firejail.git synced 2026-05-15 14:16:14 -06:00

[GH-ISSUE #506] --ignore=net does not work. Should it? #356

New issue

Closed

opened 2026-05-05 05:40:14 -06:00 by gitea-mirror · 3 comments

gitea-mirror commented

2026-05-05 05:40:14 -06:00

Owner

Originally created by @vn971 on GitHub (May 8, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/506

Currently, --ignore=net does not ignore a --net command. Should it, by design?

Steps to reproduce:
firejail --noprofile --ignore=net --net=none --ignore=net ping 8.8.8.8

Expected: successful ping. Actually: "network unreachable".

Originally created by @vn971 on GitHub (May 8, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/506 Currently, `--ignore=net` does not ignore a `--net` command. Should it, by design? Steps to reproduce: `firejail --noprofile --ignore=net --net=none --ignore=net ping 8.8.8.8` Expected: successful ping. Actually: "network unreachable".

gitea-mirror

2026-05-05 05:40:14 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 05:40:20 -06:00

Author

Owner

@pyamsoft commented on GitHub (May 9, 2016):

Ignore only ignores options specified in profile files, not on the command line.

Because net is entered on the command line, it will not be ignored.

@pyamsoft commented on GitHub (May 9, 2016): Ignore only ignores options specified in profile files, not on the command line. Because net is entered on the command line, it will not be ignored.

gitea-mirror commented

2026-05-05 05:40:23 -06:00

Author

Owner

@netblue30 commented on GitHub (May 10, 2016):

Yes, it only ignores commands in profile files.

@netblue30 commented on GitHub (May 10, 2016): Yes, it only ignores commands in profile files.

gitea-mirror commented

2026-05-05 05:40:25 -06:00

Author

Owner

@vn971 commented on GitHub (May 10, 2016):

@pyamsoft @netblue30 oh, you're right.
I don't know how I would prefer things to be (ignore CLI arguments or not), but at least the current behavior is documented, and makes sense. (People rarely concatenate arguments in my experience, although I did.)
Closing for now.
Thanks.

@vn971 commented on GitHub (May 10, 2016): @pyamsoft @netblue30 oh, you're right. I don't know how I would prefer things to be (ignore CLI arguments or not), but at least the current behavior is documented, and makes sense. (People rarely concatenate arguments in my experience, although I did.) Closing for now. Thanks.

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#356

No description provided.

Rows
Columns