4 ms·
> Only over X11 network protocol? If you read the examples you'll see that they mount /tmp/.X11-unix in the container, thats where the X-Sessions Unix domain s
by thefr0g 5y ago
> Only over X11 network protocol?
If you read the examples you'll see that they mount /tmp/.X11-unix in the container, thats where the X-Sessions Unix domain socket is. You can do the same for pulseaudio. But you shouldn't. Use Wayland and Pipewire if you are actually interested in using this as a security measure, since they are built for sandboxing.
> I thought modern browsers would need /dev/dri/?
They only need it for hw-acceleration. You can also give the container access to it if you need that.