sudo a graphical app?

[Joel Rees]

Well, it's not perfect. libflashplayer.so copied into the unprivileged
user's .mozilla/plugins, but ALSA or PulseAudio gags:

[user9 at fed ~]$ bin/localff user9-boxed
non-network local connections being added to access control list
ALSA lib pulse.c:229:(pulse_connect) PulseAudio: Unable to connect:
Connection refused

ALSA lib pcm_hw.c:1401:(_snd_pcm_hw_open) Invalid value for card
ALSA lib pulse.c:229:(pulse_connect) PulseAudio: Unable to connect:
Connection refused

ALSA lib pcm_hw.c:1401:(_snd_pcm_hw_open) Invalid value for card
ALSA lib pulse.c:229:(pulse_connect) PulseAudio: Unable to connect:
Connection refused

...

Video seems to work, though.

Joel Rees

On Thu, Aug 11, 2011 at 9:50 AM, Joel Rees <joel.rees at gmail.com> wrote:
> On Tue, Aug 9, 2011 at 6:26 PM, Andre Speelmans <fedora-list at cosiso.nl> wrote:
>> Hi Jeol,
>>
>>> sudo -u user9-boxed -- /usr/bin/firefox %u &
>>>
>>> gives a "sorry, you must have a tty to run sudo" error in
>>> /var/log/secure . So does using the firebox command.
>>
>> If I recall correctly, there is a line "requiretty" in the
>> /etc/sudoers file (or can be added). The default value is true, you
>> might try changing that to false.
>
> b'gosh, it says that's supposed to be off by default, but I added
> !requiretty to the defaults line and the clicky works now!
>
> (Now comes the hard part, trying to figure out whether this effort at
> sandboxing really does any good.)
>
> Thanks.
>
> Joel Rees
>