How to disable all protocols?

[saltiniroberto]

The flag --protocol requires at least one protocol to be provided, which means that through this flag one can filter all protocols except the one provided.

How can one disable all protocols? Is this done via --net=none?

[kmk3]

How to disable all protocols?

Does it work with --protocol== in the CLI or protocol = in the profile?

See:

• firejail/src/firejail/profile.c

  Lines 1966 to 1984 in 27b67a6

  	char *profile_list_compress(char *list)
  	{
  	size_t i;
  	/* Comma separated list is processed so that:
  	* "item" -> adds item to list
  	* "-item" -> removes item from list
  	* "+item" -> adds item to list
  	* "=item" -> clear list, add item
  	*
  	* For example:
  	* ,a,,,b,,,c, -> a,b,c
  	* a,,b,,,c,a -> a,b,c
  	* a,b,c,-a -> b,c
  	* a,b,c,-a,a -> b,c,a
  	* a,+b,c -> a,b,c
  	* a,b,=c,d -> c,d
  	* a,b,c,= ->
  	*/

• firejail/src/firejail/profile.c

  Lines 2042 to 2050 in 27b67a6

  	case '=':
  	in[i] = ++item;
  	/* Include non-empty item */
  	if (!*item)
  	in[i] = 0;
  	/* Remove all already included items */
  	for (k = 0; k < i; ++k)
  	in[k] = 0;
  	break;

[rusty-snake]

Duplicate of #639

See summary in #639 (comment)