modif: keep pipewire group unless nosound is used

This group is apparently used on Gentoo[1].

Currently only the "audio" supplementary group is kept.

Fixes netblue30#5992.

See also commit f329386 ("Keep vglusers group unless no3d is used
(virtualgl)", 2022-01-07) / PR netblue30#4851.

[1] https://wiki.gentoo.org/wiki/PipeWire

Reported-by: @amano-kenji

RELNOTES

@@ -21,6 +21,7 @@ firejail (0.9.73) baseline; urgency=low
   * modif: Improve --version/--help & print version on startup (#5829)
   * modif: improve errExit error messages (#5871)
   * modif: drop deprecated 'shell' option references (#5894)
+  * modif: keep pipewire group unless nosound is used (#5992 #5993)
   * bugfix: qutebrowser: links will not open in the existing instance (#5601
     #5618)
   * bugfix: fix --hostname and --hosts-file commands

src/firejail/main.c

@@ -3217,13 +3217,18 @@ int main(int argc, char **argv, char **envp) {
 
 		gid_t g;
 		if (!arg_nogroups || !check_can_drop_all_groups()) {
-			// add audio group
+			// add audio groups
 			if (!arg_nosound) {
 				g = get_group_id("audio");
 				if (g) {
 					sprintf(ptr, "%d %d 1\n", g, g);
 					ptr += strlen(ptr);
 				}
+				g = get_group_id("pipewire");
+				if (g) {
+					sprintf(ptr, "%d %d 1\n", g, g);
+					ptr += strlen(ptr);
+				}
 			}
 
 			// add video group

src/firejail/util.c

@@ -207,6 +207,8 @@ static void clean_supplementary_groups(gid_t gid) {
 	if (!arg_nosound) {
 		copy_group_ifcont("audio", groups, ngroups,
 		                  new_groups, &new_ngroups, MAX_GROUPS);
+		copy_group_ifcont("pipewire", groups, ngroups,
+		                  new_groups, &new_ngroups, MAX_GROUPS);
 	}
 
 	if (!arg_novideo) {