[GH-ISSUE #467] keep sound with --private-dev #332

Closed
opened 2026-05-05 05:36:53 -06:00 by gitea-mirror · 2 comments
Owner

Originally created by @suedi on GitHub (Apr 21, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/467

Get no sound with icecat when using --private-dev

Guess icecat cannot find /dev/snd ?

can you whitelist devices somehow?

Also got error something like "gnu tls cannot get random"

Does sound like it could effect security if random numbers cannot be generated?
Could you say something about that?

Originally created by @suedi on GitHub (Apr 21, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/467 Get no sound with icecat when using --private-dev Guess icecat cannot find /dev/snd ? can you whitelist devices somehow? Also got error something like "gnu tls cannot get random" Does sound like it could effect security if random numbers cannot be generated? Could you say something about that?
gitea-mirror 2026-05-05 05:36:53 -06:00
Author
Owner

@netblue30 commented on GitHub (Apr 22, 2016):

The whole purpose of --private-dev is to disable sound, video cameras and other fancy user devices. Use it mainly for servers, pdf readers and such. Whitelisting is supported for /dev directory.

"gnu tls cannot get random": I have no idea where is coming from, --private-dev creates /dev/random and /dev/urandom.

<!-- gh-comment-id:213409267 --> @netblue30 commented on GitHub (Apr 22, 2016): The whole purpose of --private-dev is to disable sound, video cameras and other fancy user devices. Use it mainly for servers, pdf readers and such. Whitelisting is supported for /dev directory. "gnu tls cannot get random": I have no idea where is coming from, --private-dev creates /dev/random and /dev/urandom.
Author
Owner

@suedi commented on GitHub (Apr 22, 2016):

Thanks for info

closing...

<!-- gh-comment-id:213517858 --> @suedi commented on GitHub (Apr 22, 2016): Thanks for info closing...
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#332
No description provided.