mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-15 14:16:14 -06:00
[GH-ISSUE #5587] gamescope as x11 sandbox #3034
Labels
No labels
LTS merge
LTS merge
bug
bug
converted-to-discussion
doc-todo
documentation
duplicate
enhancement
file-transfer
firecfg
firejail-in-firejail
firetools
graphics
help wanted
information_old
installation
invalid
modif
moved
needinfo
networking
notabug
notourbug
old-version
overlayfs
packaging
profile-request
pull-request
question
question_old
removal
runtime-permissions
sandbox-ipc
security
stale
wiki
wiki
wontfix
wordpress
workaround
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: github-starred/firejail#3034
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @ghost on GitHub (Jan 14, 2023).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5587
https://github.com/Plagman/gamescope
While not meant to be used as x11 sandbox, it could work as one, if used with private-tmp and /tmp/.X11-unix writable.
gamescope creates it's own socket, using Xwayland, when an x11 app starts with it and only needs access to the wayland socket.
The benefit for using gamescope would mainly be graphics acceleration with x sandboxing.
Maybe something like if "x11 gamescope" is in config files, do not map .X11-unix folder from host system and leave the dir writable.