Only block ioctl calls with specific arguments

[open-contracts]

Hi, I would like to block the ioctl syscall to a specific driver, i.e. with a specific argument, only. Is this possible with firejail?

[rusty-snake]

ATM this is not possible.

[open-contracts]

I thought of a way, let me know if it is secure:

simply block access to the device driver file --blacklist=/dev/drivername that would be the first argument to ioctl