1 files changed, 2 insertions, 0 deletions

diff --git a/src/firejail/netfilter.c b/src/firejail/netfilter.c
index 5b49fe19a..686efb6cb 100644
--- a/src/firejail/netfilter.c
+++ b/src/firejail/netfilter.c
@@ -61,6 +61,8 @@ void netfilter_netlock(pid_t pid) {
                         ; // run without terminal logger
                 else if (p == 0) { // child
                         drop_privs(0);
+                        env_apply_all();
+                        umask(orig_umask);
 
                         char *cmd;
                         if (asprintf(&cmd, "%s -e \"%s/firejail/fnettrace --tail --log=%s\"", terminal, LIBDIR, flog) == -1)