refactor, check the sandbox status for all join options

1 files changed, 5 insertions, 0 deletions

diff --git a/src/firejail/netfilter.c b/src/firejail/netfilter.c
index 11c7e9669..8fbd11bba 100644
--- a/src/firejail/netfilter.c
+++ b/src/firejail/netfilter.c
@@ -175,6 +175,11 @@ void netfilter_print(pid_t pid, int ipv6) {
                 exit(1);
         }
 
+        if (invalid_sandbox(child)) {
+                fprintf(stderr, "Error: cannot join the network namespace\n");
+                exit(1);
+        }
+
         EUID_ROOT();
         if (join_namespace(child, "net")) {
                 fprintf(stderr, "Error: cannot join the network namespace\n");