Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Warning - networking feature is disabled in Firejail configuration file @ Opera #2888

Closed
ghost opened this issue Aug 4, 2019 · 6 comments
Closed
Labels
information_old (Deprecated; use "doc-todo" or "needinfo" instead) Information was/is required

Comments

@ghost
Copy link

ghost commented Aug 4, 2019

Hi!

When I run opera with firejail command in terminal, terminal shows me:

Warning: networking feature is disabled in Firejail configuration file

Internet is working in Opera Browser.

How can I fix that?

@ghost
Copy link
Author

ghost commented Aug 4, 2019

# firejail --dns=127.0.0.1 opera

Warning: networking feature is disabled in Firejail configuration file

@Vincent43
Copy link
Collaborator

This may be caused by restricted-network yes in /etc/firejail/firejail.config. I think it doesn't affect --dns option so you may ignore it. If for some reason you want to get rid of that message, please set restricted-network yes in above config file.

@rusty-snake rusty-snake added the information_old (Deprecated; use "doc-todo" or "needinfo" instead) Information was/is required label Aug 4, 2019
@ghost
Copy link
Author

ghost commented Aug 4, 2019

I set
restricted-network no

and the error is gone in terminal (output)

Can I leave it to 'no' or better to yes?

My internet is working with both: 'yes+no'

@rusty-snake
Copy link
Collaborator

firejail.config:

# Enable or disable restricted network support, default disabled. If enabled,
# networking features should also be enabled (network yes).
# Restricted networking grants access to --interface, --net=ethXXX and
# --netfilter only to root user. Regular users are only allowed --net=none.

restricted-network = yes means that a normal use can't use --interface, --eth (except of --net=none) and --netfilter. If you need no one of this, you can set it to yes without issues (and harden your system a little bit more).

@ghost
Copy link
Author

ghost commented Aug 4, 2019

I set it back to 'yes'...

Thanks for the help. :-)

@ghost
Copy link
Author

ghost commented Aug 4, 2019

(SOLVED)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
information_old (Deprecated; use "doc-todo" or "needinfo" instead) Information was/is required
Projects
None yet
Development

No branches or pull requests

2 participants