[GH-ISSUE #5992] Leave pipewire group along with audio group if logind is absent #3148

Closed
opened 2026-05-05 09:46:53 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @amano-kenji on GitHub (Sep 6, 2023).
Original GitHub issue: https://github.com/netblue30/firejail/issues/5992

Description

Currently, if noroot and nogroups are present without nosound and logind is absent, audio group remains, but pipewire groups doesn't remain. pipewire group is important for giving realtime priority to pipewire clients.

Originally created by @amano-kenji on GitHub (Sep 6, 2023). Original GitHub issue: https://github.com/netblue30/firejail/issues/5992 ### Description Currently, if `noroot` and `nogroups` are present without `nosound` and logind is absent, `audio` group remains, but `pipewire` groups doesn't remain. `pipewire` group is important for giving realtime priority to pipewire clients.
Author
Owner

@kmk3 commented on GitHub (Sep 6, 2023):

Currently, if noroot and nogroups are present without nosound and
logind is absent, sound group remains, but pipewire groups doesn't
remain. pipewire group is important for giving realtime priority to
pipewire clients.

What distribution and firejail version?

Do you mean the audio group or is there an actual sound group?

I don't think there is anything done for the latter in the code.

<!-- gh-comment-id:1709236388 --> @kmk3 commented on GitHub (Sep 6, 2023): > Currently, if `noroot` and `nogroups` are present without `nosound` and > logind is absent, `sound` group remains, but `pipewire` groups doesn't > remain. `pipewire` group is important for giving realtime priority to > pipewire clients. What distribution and firejail version? Do you mean the `audio` group or is there an actual `sound` group? I don't think there is anything done for the latter in the code.
Author
Owner

@amano-kenji commented on GitHub (Sep 7, 2023):

I fixed the typos.

Distribution: Gentoo Linux
firejail version:

firejail version 0.9.72

Compile time support:
        - always force nonewprivs support is disabled
        - AppArmor support is enabled
        - AppImage support is enabled
        - chroot support is enabled
        - D-BUS proxy support is enabled
        - file transfer support is enabled
        - firetunnel support is disabled
        - IDS support is disabled
        - networking support is enabled
        - output logging is enabled
        - overlayfs support is disabled
        - private-home support is enabled
        - private-cache and tmpfs as user enabled
        - SELinux support is disabled
        - user namespace support is enabled
        - X11 sandboxing support is enabled
<!-- gh-comment-id:1709491002 --> @amano-kenji commented on GitHub (Sep 7, 2023): I fixed the typos. Distribution: Gentoo Linux firejail version: ``` firejail version 0.9.72 Compile time support: - always force nonewprivs support is disabled - AppArmor support is enabled - AppImage support is enabled - chroot support is enabled - D-BUS proxy support is enabled - file transfer support is enabled - firetunnel support is disabled - IDS support is disabled - networking support is enabled - output logging is enabled - overlayfs support is disabled - private-home support is enabled - private-cache and tmpfs as user enabled - SELinux support is disabled - user namespace support is enabled - X11 sandboxing support is enabled ```
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#3148
No description provided.