[GH-ISSUE #1200] Is there a point in `--net=<ethernet_interface>` if you don't use X11 sandboxing? #822

New issue

Closed

opened 2026-05-05 06:54:26 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 06:54:26 -06:00

Owner

Originally created by @rieje on GitHub (Apr 8, 2017).
Original GitHub issue: https://github.com/netblue30/firejail/issues/1200

Quick question: Is there a point in --net=<ethernet_interface> if you don't use X11 sandboxing? What additional protection would it offer, if any? I'm currently writing a wrapper script for Firefox and for laptops I don't use this option since wlan devices are not supported and I'm wondering if I should use it for my desktop that is always hooked up to ethernet.

Thanks.

Originally created by @rieje on GitHub (Apr 8, 2017). Original GitHub issue: https://github.com/netblue30/firejail/issues/1200 Quick question: Is there a point in `--net=<ethernet_interface>` if you don't use X11 sandboxing? What additional protection would it offer, if any? I'm currently writing a wrapper script for Firefox and for laptops I don't use this option since wlan devices are not supported and I'm wondering if I should use it for my desktop that is always hooked up to ethernet. Thanks.

gitea-mirror closed this issue

2026-05-05 06:54:28 -06:00

gitea-mirror commented

2026-05-05 06:54:31 -06:00

Author

Owner

@chiraag-nataraj commented on GitHub (Apr 8, 2017):

Well if nothing else, you can setup custom iptables/netfilter rules (see the --netfilter option).

@chiraag-nataraj commented on GitHub (Apr 8, 2017): Well if nothing else, you can setup custom iptables/netfilter rules (see the `--netfilter` option).

gitea-mirror referenced this issue

2026-05-05 10:07:28 -06:00

[PR #822] [MERGED] If .Xauthority is symlink, skip and warn #3762

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#822

No description provided.

Rows
Columns

[GH-ISSUE #1200] Is there a point in --net=<ethernet_interface> if you don't use X11 sandboxing? #822

[GH-ISSUE #1200] Is there a point in `--net=<ethernet_interface>` if you don't use X11 sandboxing? #822