#994818 firejail: audio input is not blocked in default.profile

Package:
firejail
Source:
firejail
Description:
sandbox to restrict the application environment
Submitter:
Vincent Lefevre
Date:
2021-09-21 10:33:04 UTC
Severity:
important
Tags:
#994818#5
Date:
2021-09-21 10:24:08 UTC
From:
To:
The intent of upstream commit ee7b466576a06ec8ccb82e7ad8277d7f7fe4549b
is to block input devices in the default profile. For instance, with
this commit, the webcam (via `/dev/video*`) is no longer available.
But the microphone is still available. This is not consistent and may
give a false sense of security (with obvious privacy issues).

Tested with the Zoom client (audio works, video doesn't), with
audacity (audio works, while it shouldn't), and cheese (video
doesn't work, as expected).
#994818#10
Date:
2021-09-21 10:29:03 UTC
From:
To:
fixing the typo in the title. :-(