[GH-ISSUE #462] Is it possible to run a separate instance of pulseaudio inside the sandbox, using xpra to "hear its sounds"? #330

New issue

Closed

opened 2026-05-05 05:36:41 -06:00 by gitea-mirror · 2 comments

gitea-mirror commented

2026-05-05 05:36:41 -06:00

Owner

Originally created by @DamienGrand on GitHub (Apr 20, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/462

Hello!
It just crossed my mind that, given that Firejail now has X forwarding support and xpra specifically (which has good sound support) it should be possible to block access to host's pulseaudio while running a "local" pulseaudio entirely inside firejail's sandbox, thus achieving flexible sound isolation.

One thing this might be good for is separating microphone and playback access (Xpra has settings for that)

This would for instance allow to isolate Chrome in firejail in a manner that allows sound playback (for watching videos) while at the same time not allowing microphone access.

Possible?

P.S.:
Do I understand correctly that currently, one can't have firejail pass commands to xpra ?(It's not critical for managing sound in the manner described above, but could be useful)

Originally created by @DamienGrand on GitHub (Apr 20, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/462 Hello! It just crossed my mind that, given that Firejail now has X forwarding support and xpra specifically (which has good sound support) it should be possible to block access to host's pulseaudio while running a "local" pulseaudio entirely inside firejail's sandbox, thus achieving flexible sound isolation. One thing this might be good for is separating microphone and playback access (Xpra has settings for that) This would for instance allow to isolate Chrome in firejail in a manner that allows sound playback (for watching videos) while at the same time not allowing microphone access. Possible? P.S.: Do I understand correctly that currently, one can't have firejail pass commands to xpra ?_(It's not critical for managing sound in the manner described above, but could be useful)_

gitea-mirror

2026-05-05 05:36:41 -06:00

closed this issue
added the
enhancement
label

gitea-mirror commented

2026-05-05 05:36:46 -06:00

Author

Owner

@netblue30 commented on GitHub (Apr 21, 2016):

I'll investigate it, thanks.

@netblue30 commented on GitHub (Apr 21, 2016): I'll investigate it, thanks.

gitea-mirror commented

2026-05-05 05:36:48 -06:00

Author

Owner

@netblue30 commented on GitHub (May 31, 2016):

Unfortunately pulse audio runs as a single instance, so we cannot isolate it.

@netblue30 commented on GitHub (May 31, 2016): Unfortunately pulse audio runs as a single instance, so we cannot isolate it.

gitea-mirror referenced this issue

2026-05-05 07:21:40 -06:00

[GH-ISSUE #1570] Avoid 'exo-open' on xfce desktop #1046

gitea-mirror referenced this issue

2026-05-05 07:22:33 -06:00

[GH-ISSUE #1584] Firefox Nightly breaks out of firejail(-0.9.50,-0.9.51) #1055