[GH-ISSUE #745] blocking the mic and webcam? #506

Closed
opened 2026-05-05 06:00:14 -06:00 by gitea-mirror · 6 comments
Owner

Originally created by @xahare on GitHub (Aug 27, 2016).
Original GitHub issue: https://github.com/netblue30/firejail/issues/745

so, outside of xpra, are either possible? how?

Originally created by @xahare on GitHub (Aug 27, 2016). Original GitHub issue: https://github.com/netblue30/firejail/issues/745 so, outside of xpra, are either possible? how?
gitea-mirror 2026-05-05 06:00:14 -06:00
Author
Owner

@Fred-Barclay commented on GitHub (Aug 27, 2016):

If I'm not mistaken, --nosound and --private-dev will block the microphone/speakers and webcam, respectively.

I think that --private-dev will block the microphone and webcam without disabling system sounds, but I might be wrong on that.
(I'm not sure that xpra actually blocks the camera or microphone.)

<!-- gh-comment-id:242934156 --> @Fred-Barclay commented on GitHub (Aug 27, 2016): If I'm not mistaken, `--nosound` and `--private-dev` will block the microphone/speakers and webcam, respectively. I _think_ that `--private-dev` will block the microphone and webcam without disabling system sounds, but I might be wrong on that. (I'm not sure that xpra actually blocks the camera or microphone.)
Author
Owner

@xahare commented on GitHub (Aug 28, 2016):

xpra has a menu to allow access to them. dont know how easy that would be for the app in question to get around.

<!-- gh-comment-id:242953290 --> @xahare commented on GitHub (Aug 28, 2016): xpra has a menu to allow access to them. dont know how easy that would be for the app in question to get around.
Author
Owner

@chiraag-nataraj commented on GitHub (Aug 28, 2016):

From what I can tell, pretty easy (at least with PulseAudio). I "disabled" access to speakers and the microphone, yet Youtube can still play stuff and Hangouts can still access my mic. I don't know what exactly it's preventing - maybe direct access to the /dev files?

<!-- gh-comment-id:242980982 --> @chiraag-nataraj commented on GitHub (Aug 28, 2016): From what I can tell, pretty easy (at least with PulseAudio). I "disabled" access to speakers and the microphone, yet Youtube can still play stuff and Hangouts can still access my mic. I don't know what exactly it's preventing - maybe direct access to the /dev files?
Author
Owner

@netblue30 commented on GitHub (Aug 29, 2016):

xpra has a menu to allow access to them. dont know how easy that would be for the app in question to get around.

Most applications go directly to /dev directory or PulseAudio and bypass xpra. Actually, I don't know any application using X11 sound settings.

<!-- gh-comment-id:243128544 --> @netblue30 commented on GitHub (Aug 29, 2016): > xpra has a menu to allow access to them. dont know how easy that would be for the app in question to get around. Most applications go directly to /dev directory or PulseAudio and bypass xpra. Actually, I don't know any application using X11 sound settings.
Author
Owner

@Fred-Barclay commented on GitHub (Aug 29, 2016):

@netblue30, what is proper syntax for disabling the microphone and webcam? Would --private-dev be sufficient, or is --nosound needed as well?
Thanks!

<!-- gh-comment-id:243176039 --> @Fred-Barclay commented on GitHub (Aug 29, 2016): @netblue30, what is proper syntax for disabling the microphone and webcam? Would `--private-dev` be sufficient, or is `--nosound` needed as well? Thanks!
Author
Owner

@netblue30 commented on GitHub (Aug 29, 2016):

The webcam is disabled by --private-dev. We don't have independent control for speakers and microphone, both are disabled by --nosound.

<!-- gh-comment-id:243195822 --> @netblue30 commented on GitHub (Aug 29, 2016): The webcam is disabled by --private-dev. We don't have independent control for speakers and microphone, both are disabled by --nosound.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#506
No description provided.