subgraph / subgraph-os-issues

Subgraph OS issues repository
73 stars 10 forks source link

Oz sandbox profile for MPlayer #80

Open botherder opened 8 years ago

botherder commented 8 years ago

I'm trying to create an Oz profile for mplayer which is currently not sandboxed by default. I think it is valuable to try to sandbox as many applications that make use of file format processors as possible.

{
"path": "/usr/bin/mplayer"
, "allow_files": true
, "xserver": {
        "enabled": true
        , "enable_tray": false
        , "tray_icon":""
        , "audio_mode": "pulseaudio"
}
, "networking":{
        "type":"empty"
}
, "whitelist": [
        {"path": "${HOME}/.mplayer", "can_create": true}
        , {"path": "/etc/mplayer/"}
]
, "blacklist": [
]
, "seccomp": {
        "mode":"blacklist"
        , "enforce": true
}
}

This is not quite working yet. The mplayer window is opened, and audio can be heard, but the video is blank. Also, with some particular arguments (e.g. -fs) it just fails.

botherder commented 8 years ago

Update: I think we ruled that mplayer is just incompatible with Xpra. Ignore this profile until the switch to Wayland is completed.

xSmurf commented 8 years ago

In the meantime if you want something similar MPV works relatively well (barring the bit of confusion due to the instructions to drag & drop which obviously will not work)

dma commented 8 years ago

Classifying this as an outstanding bug because we simply failed to make this work in Oz. Let's keep this open until we find out why or switch to Wayland.