[GH-ISSUE #4528] nogroups kills ALSA audio in mpv.profile and vlc.profile #2697

Closed
opened 2026-05-05 09:21:28 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @crocket on GitHub (Sep 11, 2021).
Original GitHub issue: https://github.com/netblue30/firejail/issues/4528

Bug

Only root and audio group can read from and write to files in /dev/snd.
My regular user account belongs to audio group which allows me to play audio.
nogroups option in mpv.profile and vlc.profile kills ALSA audio.

It seems that firefox-common.profile also contains nogroup option. This is going to break audio in firefox and librewolf, too.

Environment

  • Linux distribution and version // Gentoo Linux
  • Firejail version
$ firejail --version
firejail version 0.9.66

Compile time support:
        - always force nonewprivs support is disabled
        - AppArmor support is enabled
        - AppImage support is enabled
        - chroot support is enabled
        - D-BUS proxy support is enabled
        - file and directory whitelisting support is enabled
        - file transfer support is enabled
        - firetunnel support is disabled
        - networking support is enabled
        - output logging is enabled
        - overlayfs support is disabled
        - private-home support is enabled
        - private-cache and tmpfs as user enabled
        - SELinux support is disabled
        - user namespace support is enabled
        - X11 sandboxing support is enabled
Originally created by @crocket on GitHub (Sep 11, 2021). Original GitHub issue: https://github.com/netblue30/firejail/issues/4528 ### Bug Only root and audio group can read from and write to files in /dev/snd. My regular user account belongs to audio group which allows me to play audio. `nogroups` option in mpv.profile and vlc.profile kills ALSA audio. It seems that firefox-common.profile also contains `nogroup` option. This is going to break audio in firefox and librewolf, too. ### Environment - Linux distribution and version // Gentoo Linux - Firejail version ``` $ firejail --version firejail version 0.9.66 Compile time support: - always force nonewprivs support is disabled - AppArmor support is enabled - AppImage support is enabled - chroot support is enabled - D-BUS proxy support is enabled - file and directory whitelisting support is enabled - file transfer support is enabled - firetunnel support is disabled - networking support is enabled - output logging is enabled - overlayfs support is disabled - private-home support is enabled - private-cache and tmpfs as user enabled - SELinux support is disabled - user namespace support is enabled - X11 sandboxing support is enabled ```
gitea-mirror 2026-05-05 09:21:28 -06:00
  • closed this issue
  • added the
    moved
    label
Author
Owner

@crocket commented on GitHub (Sep 11, 2021):

This seems to have been reported several times.... I should move this to discussion.

<!-- gh-comment-id:917416427 --> @crocket commented on GitHub (Sep 11, 2021): This seems to have been reported several times.... I should move this to discussion.
Author
Owner

@kmk3 commented on GitHub (Sep 11, 2021):

@crocket commented on Sep 11:

This seems to have been reported several times.... I should move this to
discussion.

Link for reference: #4531

<!-- gh-comment-id:917459396 --> @kmk3 commented on GitHub (Sep 11, 2021): @crocket commented [on Sep 11](https://github.com/netblue30/firejail/issues/4528#issuecomment-917416427): > This seems to have been reported several times.... I should move this to > discussion. Link for reference: #4531
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#2697
No description provided.