OSS in jail

[Anton Sayetsky]

2015-12-06 21:44 GMT+02:00 Luís Fernando Schultz Xavier da Silveira
<schultz at ime.usp.br>:
> Hi,
>
> I would like one of my jails to have the ability to play back sound,
> but not to record it. As I understand, sound is played back by writing
> to /dev/dsp and recorded by reading from it. Hence, placing the /dev/dsp
> device (and /dev/dsp[0-9]* devices) in the jail via devfs.rules is not
> a solution since the jail superuser can override permissions on these
> devices and even read from them when they lack read permission.
>
> Is there a way to give a device to a jail in read-only mode?
How do you want to write sound output to read-only device?