(In reply to Franck Bui from comment #4) > (In reply to Fabian Vogt from comment #3) > > uaccess would be enough to allow the usual use through logged in users and > > applications, would however break GPU acceleration through su to another > > user, ssh or libvirt virtio-gpu OOTB. > > Are these use cases common enough or can we assume that users should rely on > the "render" group when needed ? Worth a try. If it breaks too much, it can be changed back again. IMO it should be documented at least and in the case of TW also announced.