github-starred/firejail
2
0
Fork 0
mirror of https://github.com/netblue30/firejail.git synced 2026-05-21 06:45:29 -06:00
Code Issues 531 Projects Packages Wiki Activity Actions 1

modif: private-dev: keep /dev/kfd unless no3d is used (#6380)

Browse source 
Apparently hashcat needs access to this device for hardware acceleration
on AMD gpus and `private-dev` currently breaks that (see #6364).

It seems to be used by the "amdgpu" and "amdkfd" Linux kernel drivers
and as with /dev/dri/renderD128, this file is owned by the "render"
group.

Relevant udev rules from /usr/lib/udev/rules.d/50-udev-default.rules:

    SUBSYSTEM=="drm", KERNEL=="renderD*", GROUP="render", MODE="0666"
    SUBSYSTEM=="kfd", GROUP="render", MODE="0666"
    SUBSYSTEM=="accel", GROUP="render", MODE="0666"

Environment: udev 255.6-1 on Artix Linux.

Reported-by: @schrotthaufen
This commit is contained in:
Kelvin M. Klann 2024-06-15 15:58:33 +00:00 • committed by GitHub
parent 0fb4753986
commit b89ec81892
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 2 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
src/firejail/fs_dev.c
View file

@ -52,7 +52,8 @@ typedef struct {
static DevEntry dev[] = {
{"/dev/snd", RUN_DEV_DIR "/snd", DEV_SOUND}, // sound device
{"/dev/dri", RUN_DEV_DIR "/dri", DEV_3D}, // 3d device
{"/dev/dri", RUN_DEV_DIR "/dri", DEV_3D}, // 3d devices
{"/dev/kfd", RUN_DEV_DIR "/kfd", DEV_3D},
{"/dev/nvidia0", RUN_DEV_DIR "/nvidia0", DEV_3D},
{"/dev/nvidia1", RUN_DEV_DIR "/nvidia1", DEV_3D},
{"/dev/nvidia2", RUN_DEV_DIR "/nvidia2", DEV_3D},