search

netblue30 / firejail

Linux namespaces and seccomp-bpf sandbox
https://firejail.wordpress.com
GNU General Public License v2.0
5.77k stars 565 forks source link

IPv6 nameservers #895

Open reinerh opened 7 years ago

reinerh commented 7 years ago

Hi,

this is not a bug report, just some information about an issue Aidan Gauland reported on the Debian bugtracker. He was using a firejail sandbox with --net=eth0 and was losing internet connectivity inside the sandbox (but not outside). We figured out hostname resolution suddenly stopped working. He is using rdnssd on the host, which is a tool that autodiscovers IPv6 nameservers. This was overwriting the resolv.conf with a nameserver detected on the local network. The content looked like this: nameserver fe80::c6e9:84ff:1234:abcd%eth0 But as there was no eth0 interface inside the sandbox (instead there is a eth0-nnnnn interface), the nameserver was no longer reachable.

He also suggests to document this behavior on the known issues page.

netblue30 commented 7 years ago

Thanks, I'll look into it.

matu3ba commented 4 years ago

@reinerh @netblue30 Is this still relevant/reproducable or can this be closed?

reinerh commented 4 years ago

I would say that's still relevant.