Re: sudo a graphical app?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Aug 11, 2011 at 6:27 PM, Joel Rees <joel.rees@xxxxxxxxx> wrote:
> Well, it's not perfect. libflashplayer.so copied into the unprivileged
> user's .mozilla/plugins, but ALSA or PulseAudio gags:
>
> [user9@fed ~]$ bin/localff user9-boxed
> non-network local connections being added to access control list
> ALSA lib pulse.c:229:(pulse_connect) PulseAudio: Unable to connect:
> Connection refused
>
> ALSA lib pcm_hw.c:1401:(_snd_pcm_hw_open) Invalid value for card
> ALSA lib pulse.c:229:(pulse_connect) PulseAudio: Unable to connect:
> Connection refused
>
> ALSA lib pcm_hw.c:1401:(_snd_pcm_hw_open) Invalid value for card
> ALSA lib pulse.c:229:(pulse_connect) PulseAudio: Unable to connect:
> Connection refused

Probably because PulseAudio on your normal user and PulseAudio in your
boxed user are trying to use the same sound device at the same time.
You can either forward your sound from the PulseAudio server running
as your sandboxed user to the server running as your normal user, or
figure out how to punch a hole in your sandbox that lets apps talk to
the normal user's server.  Audio in vanilla sudoed applications work
just fine on my system so I presume something about your sandbox
configuration is blocking it.

> ...
>
> Video seems to work, though.
>
> Joel Rees
>
> On Thu, Aug 11, 2011 at 9:50 AM, Joel Rees <joel.rees@xxxxxxxxx> wrote:
>> On Tue, Aug 9, 2011 at 6:26 PM, Andre Speelmans <fedora-list@xxxxxxxxx> wrote:
>>> Hi Jeol,
>>>
>>>> sudo -u user9-boxed -- /usr/bin/firefox %u &
>>>>
>>>> gives a "sorry, you must have a tty to run sudo" error in
>>>> /var/log/secure . So does using the firebox command.
>>>
>>> If I recall correctly, there is a line "requiretty" in the
>>> /etc/sudoers file (or can be added). The default value is true, you
>>> might try changing that to false.
>>
>> b'gosh, it says that's supposed to be off by default, but I added
>> !requiretty to the defaults line and the clicky works now!
>>
>> (Now comes the hard part, trying to figure out whether this effort at
>> sandboxing really does any good.)
>>
>> Thanks.
>>
>> Joel Rees

-T.C.
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux