[PR #6380] [MERGED] modif: private-dev: keep /dev/kfd unless no3d is used #5989

Closed
opened 2026-05-05 10:48:39 -06:00 by gitea-mirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/netblue30/firejail/pull/6380
Author: @kmk3
Created: 6/13/2024
Status: Merged
Merged: 6/15/2024
Merged by: @kmk3

Base: masterHead: private-dev-keep-kfd


📝 Commits (1)

  • b4e9631 modif: private-dev: keep /dev/kfd unless no3d is used

📊 Changes

1 file changed (+2 additions, -1 deletions)

View changed files

📝 src/firejail/fs_dev.c (+2 -1)

📄 Description

Apparently hashcat needs access to this device for hardware acceleration
on AMD gpus and private-dev currently breaks that (see #6364).

It seems to be used by the "amdgpu" and "amdkfd" Linux kernel drivers
and as with /dev/dri/renderD128, this file is owned by the "render"
group.

Relevant udev rules from /usr/lib/udev/rules.d/50-udev-default.rules:

SUBSYSTEM=="drm", KERNEL=="renderD*", GROUP="render", MODE="0666"
SUBSYSTEM=="kfd", GROUP="render", MODE="0666"
SUBSYSTEM=="accel", GROUP="render", MODE="0666"

Environment: udev 255.6-1 on Artix Linux.

Reported-by: @schrotthaufen


🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/netblue30/firejail/pull/6380 **Author:** [@kmk3](https://github.com/kmk3) **Created:** 6/13/2024 **Status:** ✅ Merged **Merged:** 6/15/2024 **Merged by:** [@kmk3](https://github.com/kmk3) **Base:** `master` ← **Head:** `private-dev-keep-kfd` --- ### 📝 Commits (1) - [`b4e9631`](https://github.com/netblue30/firejail/commit/b4e9631b0dd624373aaad63afe86ca62d13b6c24) modif: private-dev: keep /dev/kfd unless no3d is used ### 📊 Changes **1 file changed** (+2 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `src/firejail/fs_dev.c` (+2 -1) </details> ### 📄 Description Apparently hashcat needs access to this device for hardware acceleration on AMD gpus and `private-dev` currently breaks that (see #6364). It seems to be used by the "amdgpu" and "amdkfd" Linux kernel drivers and as with /dev/dri/renderD128, this file is owned by the "render" group. Relevant udev rules from /usr/lib/udev/rules.d/50-udev-default.rules: SUBSYSTEM=="drm", KERNEL=="renderD*", GROUP="render", MODE="0666" SUBSYSTEM=="kfd", GROUP="render", MODE="0666" SUBSYSTEM=="accel", GROUP="render", MODE="0666" Environment: udev 255.6-1 on Artix Linux. Reported-by: @schrotthaufen --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
gitea-mirror 2026-05-05 10:48:39 -06:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/firejail#5989
No description provided.