Attempt to use setuid-sandbox to make a sandboxed GStreamer player
C Shell
Permalink
Failed to load latest commit information.
m4
plugins
tools
AUTHORS
COPYING
ChangeLog
Makefile.am
Makefile.sandboxed-player
NEWS
README.rst
autogen.sh
compile
configure.ac build: various fixes Apr 16, 2012
sandboxed-player.c

README.rst

What's This?

Sandboxeddecodebin provides a way to run the demuxing and decoding part of a GStreamer pipeline in a separate sandboxed process.

More information about it can be found in a blog post:

http://guij.emont.org/blog/2012/05/08/video-decoding-in-a-sandbox/

Installation Instructions

Prerequisites

  • GNU/Linux Operating system
  • setuid-sandbox http://code.google.com/p/setuid-sandbox/
  • GStreamer 0.10 with the plugins from at least base and bad as well as the demuxers and decoders needed by decodebin2 for the videos you want to decode
To avoid some bugs, you might need to apply the patches in the following bugs:

Installation

  • install the prerequisites, make sure sandboxme is setuid root
  • ./autogen.sh SANDBOXME_PATH=/path/to/sandboxme
  • make
  • make install

Usual ./configure options can also apply to ./autogen.sh, you can run autogen and then "configure --help" to see these options.

Example use

gst-launch-0.10 filesrc location=/path/to/video_file ! sandboxeddecodebin name=decoder ! autovideosink decoder. ! autoaudiosink