with private-dev? #2271

New issue

Closed

opened 2026-05-05 08:57:50 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 08:57:50 -06:00

Owner

Originally created by @Futureknows on GitHub (Aug 29, 2020).
Original GitHub issue: https://github.com/netblue30/firejail/issues/3613

Is it possible to blacklist /dev/snd/ along with private-dev?
I've tried including blacklist=/dev/snd/ but applications still see the sound system.
Pulseaudio exposes sound hardware UIDs to applications.
I saw that /snd/ was included in private-dev, it could be useful to have more granular control.

Originally created by @Futureknows on GitHub (Aug 29, 2020). Original GitHub issue: https://github.com/netblue30/firejail/issues/3613 Is it possible to blacklist /dev/snd/ along with private-dev? I've tried including `blacklist=/dev/snd/` but applications still see the sound system. Pulseaudio exposes sound hardware UIDs to applications. I saw that /snd/ was included in private-dev, it could be useful to have more granular control.

gitea-mirror

2026-05-05 08:57:50 -06:00

closed this issue
added the
question_old
label

gitea-mirror commented

2026-05-05 08:57:53 -06:00

Author

Owner

@rusty-snake commented on GitHub (Aug 29, 2020):

Works for me.

# Without private-dev
$ firejail --noprofile --blacklist=/dev/snd ls /dev/snd -ld
$ firejail --noprofile --blacklist=/dev/snd/ ls /dev/snd -ld

# Whith private-dev before
$ firejail --noprofile --private-dev --blacklist=/dev/snd ls /dev/snd -ld
$ firejail --noprofile --private-dev --blacklist=/dev/snd/ ls /dev/snd -ld

# Whith private-dev after
$ firejail --noprofile --blacklist=/dev/snd --private-dev ls /dev/snd -ld
$ firejail --noprofile --blacklist=/dev/snd/ --private-dev ls /dev/snd -ld

You can use nosound (firejail --noprofile --nosound ls /dev/snd -ld) to hide /dev/snd. Using blacklist only makes it inaccessible, which also leaks nothing.

@rusty-snake commented on GitHub (Aug 29, 2020): Works for me. ``` # Without private-dev $ firejail --noprofile --blacklist=/dev/snd ls /dev/snd -ld $ firejail --noprofile --blacklist=/dev/snd/ ls /dev/snd -ld # Whith private-dev before $ firejail --noprofile --private-dev --blacklist=/dev/snd ls /dev/snd -ld $ firejail --noprofile --private-dev --blacklist=/dev/snd/ ls /dev/snd -ld # Whith private-dev after $ firejail --noprofile --blacklist=/dev/snd --private-dev ls /dev/snd -ld $ firejail --noprofile --blacklist=/dev/snd/ --private-dev ls /dev/snd -ld ``` You can use `nosound` (`firejail --noprofile --nosound ls /dev/snd -ld`) to hide /dev/snd. Using `blacklist` only makes it inaccessible, which also leaks nothing.

gitea-mirror commented

2026-05-05 08:57:54 -06:00

Author

Owner

@rusty-snake commented on GitHub (Sep 1, 2020):

I'm closing here due to inactivity, please fell free to request to reopen if you have more questions.

@rusty-snake commented on GitHub (Sep 1, 2020): I'm closing here due to inactivity, please fell free to request to reopen if you have more questions.

gitea-mirror referenced this issue

2026-05-05 10:16:29 -06:00

[PR #2271] [MERGED] Add quiet option to transmission-cli profile #4246

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2271

No description provided.

Rows
Columns