[GH-ISSUE #623] `protocol unix` makes `netfilter` useless... right? #435

New issue

Closed

opened 2026-05-05 05:51:07 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 05:51:07 -06:00

Owner

Originally created by @Fred-Barclay on GitHub (Jul 9, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/623

Just making sure... if I use --protocol=unix then all network (eth, wlan) access is disabled and there is no point in using a network filter such as netfilter or --net=none, right?

--protocol=unix is turning out to be very useful when I want to disable network access but still need a dbus connection (which net none seems to block), so I want to make sure I'm using it correctly.
Thanks!
Fred

Originally created by @Fred-Barclay on GitHub (Jul 9, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/623 Just making sure... if I use `--protocol=unix` then all network (eth, wlan) access is disabled and there is no point in using a network filter such as netfilter or `--net=none`, right? `--protocol=unix` is turning out to be very useful when I want to disable network access but still need a dbus connection (which net none seems to block), so I want to make sure I'm using it correctly. Thanks! Fred

gitea-mirror

2026-05-05 05:51:07 -06:00

closed this issue
added the
information_old
label

gitea-mirror commented

2026-05-05 05:51:12 -06:00

Author

Owner

@netblue30 commented on GitHub (Jul 9, 2016):

Yes, you are right. Some programs such as evince are just crashing with "--net=none", so I put --protocol=unix instead. It is almost the same thing. The difference is in one case you see the network but you cannot connect to it, and in the other case you don't see the network at all.

@netblue30 commented on GitHub (Jul 9, 2016): Yes, you are right. Some programs such as evince are just crashing with "--net=none", so I put --protocol=unix instead. It is almost the same thing. The difference is in one case you see the network but you cannot connect to it, and in the other case you don't see the network at all.

gitea-mirror commented

2026-05-05 05:51:13 -06:00

Author

Owner

@Fred-Barclay commented on GitHub (Jul 9, 2016):

Thanks mate. :)

@Fred-Barclay commented on GitHub (Jul 9, 2016): Thanks mate. :)

gitea-mirror referenced this issue

2026-05-05 05:54:25 -06:00

[GH-ISSUE #669] Is it possible to avoid remounting /proc on an individual basis? #459

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#435

No description provided.

Rows
Columns

[GH-ISSUE #623] protocol unix makes netfilter useless... right? #435

[GH-ISSUE #623] `protocol unix` makes `netfilter` useless... right? #435