From owner-freebsd-questions@freebsd.org Sun Dec 6 19:45:33 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CC7417437 for ; Sun, 6 Dec 2015 19:45:33 +0000 (UTC) (envelope-from vsasjason@gmail.com) Received: from mail-wm0-x22b.google.com (mail-wm0-x22b.google.com [IPv6:2a00:1450:400c:c09::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 6EE8C1B46 for ; Sun, 6 Dec 2015 19:45:33 +0000 (UTC) (envelope-from vsasjason@gmail.com) Received: by wmww144 with SMTP id w144so125443380wmw.0 for ; Sun, 06 Dec 2015 11:45:31 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type:content-transfer-encoding; bh=x5x+dzB61pKdJpIb043IdOvQ1qv7K5xkyTyHxyEgt60=; b=NMutBz9AXTlEtjCwzVun+wJm7mtEs0w2W29GhBm4n6N838EjlmYoSTDVF19Yi4GvTy 1sHYPUMh16Uo86vMNEz2Q7eCg70Rd4q9rBO2M1WtkXpWVkNYCyWOiieVz6Tfc3+jc8xm 7LJEov5jbBz4SlfVE10AKxTRF9lwRgY2+/orsHdgikgSJL323RDRWxYccHh3cQ5Ioi8Q fMOPYw1dEC1CW933MCXd0JUFs7JFH9TaHhk6gf7jQZXBuLGLCvw768oW1pwWqA/4cUym rjFj2FU2AgoDgL3t1BgpLA5SkAPAN8OHcuD6+Pr2BsfG1qWtYxgNozaiicZYJbzEM1LU u0zA== X-Received: by 10.194.236.228 with SMTP id ux4mr29743594wjc.56.1449431131750; Sun, 06 Dec 2015 11:45:31 -0800 (PST) MIME-Version: 1.0 Received: by 10.194.140.75 with HTTP; Sun, 6 Dec 2015 11:45:12 -0800 (PST) In-Reply-To: <20151206194401.GA3860@hpmini> References: <20151206194401.GA3860@hpmini> From: Anton Sayetsky Date: Sun, 6 Dec 2015 21:45:12 +0200 Message-ID: Subject: Re: OSS in jail To: =?UTF-8?Q?Lu=C3=ADs_Fernando_Schultz_Xavier_da_Silveira?= Cc: freebsd-questions@freebsd.org Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 06 Dec 2015 19:45:33 -0000 2015-12-06 21:44 GMT+02:00 Lu=C3=ADs Fernando Schultz Xavier da Silveira : > Hi, > > I would like one of my jails to have the ability to play back sound, > but not to record it. As I understand, sound is played back by writing > to /dev/dsp and recorded by reading from it. Hence, placing the /dev/dsp > device (and /dev/dsp[0-9]* devices) in the jail via devfs.rules is not > a solution since the jail superuser can override permissions on these > devices and even read from them when they lack read permission. > > Is there a way to give a device to a jail in read-only mode? How do you want to write sound output to read-only device?