From owner-freebsd-questions@freebsd.org Mon Dec 7 13:04:39 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A763199AAAE for ; Mon, 7 Dec 2015 13:04:39 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 2821610E3 for ; Mon, 7 Dec 2015 13:04:37 +0000 (UTC) (envelope-from smithi@nimnet.asn.au) Received: from localhost (localhost [127.0.0.1]) by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id tB7D4RNk067567; Tue, 8 Dec 2015 00:04:27 +1100 (EST) (envelope-from smithi@nimnet.asn.au) Date: Tue, 8 Dec 2015 00:04:26 +1100 (EST) From: Ian Smith To: Lu?s Fernando Schultz Xavier da Silveira cc: freebsd-questions@freebsd.org Subject: Re: OSS in jail In-Reply-To: Message-ID: <20151207234938.F52001@sola.nimnet.asn.au> References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Dec 2015 13:04:39 -0000 In freebsd-questions Digest, Vol 601, Issue 1, Message: 4 On Sun, 6 Dec 2015 17:44:01 -0200 Lu?s Fernando Schultz Xavier da Silveira wrote: > I would like one of my jails to have the ability to play back sound, > but not to record it. As I understand, sound is played back by writing > to /dev/dsp and recorded by reading from it. Hence, placing the /dev/dsp > device (and /dev/dsp[0-9]* devices) in the jail via devfs.rules is not > a solution since the jail superuser can override permissions on these > devices and even read from them when they lack read permission. > > Is there a way to give a device to a jail in read-only mode? > If not, is it possible to create a virtual OSS stack and give that to > the jail? > How would you solve this problem? > > Also, is it possible to give the jail a mixer device that can only read > mixer settings but not alter them? > > Thanks, > Lu?s Sorry about charset mapping .. I suggest asking this (interesting) question in either or both of freebsd-jail@freebsd.org and freebsd-multimedia@freebsd.org . I'm vaguely wondering if you could use port audio/jack for this, but I've only used that on Linux, and that with ALSA .. but I expect you should find some help from the habitual denizens of those lists. cheers, Ian