Comparison of two Android audio bridging approaches inside Linux containers

For a long time, containers have been a prominent approach present both in software development and in running multiple environments on the same hardware. The container represents a lightweight and fast environment. However, its security aspects are still subject to improvement. Though the concept of unprivileged container is intended for secure operations, mounting devices, and providing direct access to those devices in a container is not the secure solution. Thus, moving the access to audio devices to the host gives opportunities for improved security in LXC unprivileged container. This paper is taking advantage of UNIX sockets client-server communication, which is generally secure when combined with POSIX permissions used to lock down the access to the file descriptor associated with the socket. The analysis of the proposed solution is given including the elaboration of the Android audio signal latency, measured at different audio levels.