netblue30 / firejail

Linux namespaces and seccomp-bpf sandbox
https://firejail.wordpress.com
GNU General Public License v2.0
5.69k stars 557 forks source link

Error ioctl: interface.c:302 net_if_mac: Operation not supported when using wifi interface with Unicast MAC #4687

Open svc88 opened 2 years ago

svc88 commented 2 years ago

Description

This issue only occurs when using a Unicast MAC address on wireless interface. If you remove the --mac completely, it will execute the xterm just fine.

Steps to Reproduce

firejail --net="wlp3s0" --dns="1.1.1.1" --mac="EA:29:F8:92:B6:7C" xterm

Expected behavior

I expect to be able to use wireless interface wlp3s0 with a random MAC address just as im able to do it on a normal eth0 interface.

Actual behavior

Reading profile /usr/local/etc/firejail/default.profile
Reading profile /usr/local/etc/firejail/disable-common.inc
Reading profile /usr/local/etc/firejail/disable-passwdmgr.inc
Reading profile /usr/local/etc/firejail/disable-programs.inc

** Note: you can use --noprofile to disable default.profile **

Parent pid 3477, child pid 3478
Error ioctl: interface.c:302 net_if_mac: Operation not supported
Error: failed to run /run/firejail/lib/fnet, exiting...
Error: proc 3477 cannot sync with peer: unexpected EOF
Peer 3478 unexpectedly exited with status 1

Behavior without a profile

nothing changed.

Environment

Checklist

svc88 commented 2 years ago

https://github.com/netblue30/firejail/issues/3000 could possibly be a duplicate, as the OP did not mention if he was using --mac, so not sure as he also didnt post a log of the output. Either way, the issue persists with --mac option