[Bug 1217118] AUDIT-FIND: udev: DRM render nodes are world-writable
https://bugzilla.suse.com/show_bug.cgi?id=1217118 https://bugzilla.suse.com/show_bug.cgi?id=1217118#c5 --- Comment #5 from Fabian Vogt <fvogt@suse.com> --- (In reply to Franck Bui from comment #4)
(In reply to Fabian Vogt from comment #3)
uaccess would be enough to allow the usual use through logged in users and applications, would however break GPU acceleration through su to another user, ssh or libvirt virtio-gpu OOTB.
Are these use cases common enough or can we assume that users should rely on the "render" group when needed ?
Worth a try. If it breaks too much, it can be changed back again. IMO it should be documented at least and in the case of TW also announced. -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com