1 files changed, 11 insertions, 0 deletions

diff --git a/src/firejail/main.c b/src/firejail/main.c
index 4b01ea0a5..fd96f8bb5 100644
--- a/src/firejail/main.c
+++ b/src/firejail/main.c
@@ -2874,6 +2874,17 @@ int main(int argc, char **argv, char **envp) {
                 }
         }
 
+        // check writable_etc and DNS/DHCP
+        if (arg_writable_etc) {
+                if (cfg.dns1 != NULL || any_dhcp()) {
+                        // we could end up overwriting the real /etc/resolv.conf, so we better exit now!
+                        fprintf(stderr, "Error: --dns/--ip=dhcp and --writable-etc are mutually exclusive\n");
+                        exit(1);
+                }
+        }
+
+
+
         // enable seccomp if only seccomp.block-secondary was specified
         if (arg_seccomp_block_secondary)
                 arg_seccomp = 1;