Is it possible to limit programs' access only to certain directory, for example, to run Viber on Fedora and force it to only be able to read under /home/username/.local/share/viber/exchange
and no other directories?
I have managed to create and run Viber as another user:group
(viber:viber
). When I try to open from inside Viber files that belong to me or any other user, it can't read them. Goal achieved but partly. Now, I stumbled against another problem, which is Viber works only with messages and when I try to make a call, it says, that it can't find neither microphone nor speakers? It feels that I know why (I run X Server (GNOME) as myself and Viber as viber:viber
(user:group
) ) but I'm not sure how to let viber user to use microphone and speakers while running X server under my name?
May be, I need to add viber
user to a certain group? Probably there are some workarounds with SELinux? If so could you provide proper policy example? :D
Viber seems to be great but it's not open-source and only God knows, what is on the source-code of that pre-compiled piece of software!