undefined | Better HN

0 pointsjbk11y ago0 comments

> Is it possible to lower your requirements or change how VLC works/can do when it is sandboxed?

Maybe for some, but not for others. You really need to be able to open a file without file opener. Opening optical disks is really important too. I don't get why read-only access to a device poses so much threats but I'm probably missing something.

FYI, so far, libpulse links to x11.

0 comments

4 comments · 2 top-level

sp33211y ago· 2 in thread

Low-level access to a device would let you read data from files that you don't have permission to read at the filesystem level.

asveikau11y ago

You can set different permissions for different devices, you are aware of that right? I can say my DVD drive is readable by gid x, but not the partitions on my hard disk... This is already what Linux distros are doing.

edohyiez11y ago

Then the media player can read every DVD you put into your drive as long as its running. So you always have to close the media player before inserting a DVD containing private files. That probably isn't that important for DVDs, but for other devices (e.g. microphone, webcam) it certainly is.

tormeh11y ago

>You really need to be able to open a file without file opener

What if you had read/write access to /home/user/music and /home/user/video ? Once we start adding blanket access like this we would probably need to add a /home/user/secret folder that no application can access unless invited to a specific file by a file opener.

j / k navigate · click thread line to collapse