Device hotplug and private-dev

[michelesr]

Is there a way to have a hot plugged device recognized when using a profile with --private-dev?

E.g.:

# webcam is unplugged
$ firejail --noprofile --private-dev sh
Parent pid 33553, child pid 33554
Child process initialized in 4.83 ms

$ ls /dev | grep video
$ exit

# webcam is now plugged but not recognized
$ ls /dev | grep video
$ exit

# fresh sandbox, webcam recognized
$ firejail --noprofile --private-dev ls /dev | grep video
Parent pid 34147, child pid 34149
Child process initialized in 4.81 ms
video0
video1

This has probably to do with the way files in /dev are mounted, by is there a way to avoid this?

[SkewedZeppelin]

Sandbox cannot be edited after creation.