Hi Am 30.11.23 um 08:53 schrieb Wolfgang Frisch:
Hi,
On 11/30/23 07:49, Thomas Zimmermann wrote:
Am 29.11.23 um 17:18 schrieb Wolfgang Frisch:
Is anyone aware of any unacceptable consequences of this change that may have been missed, or scenarios that should be tested beforehand?
ls -l /dev/dri says
crw-rw----+ 1 root video 226, 1 30. Nov 07:20 card1 crw-rw-rw- 1 root render 226, 128 30. Nov 07:20 renderD128
If neither file is accessible by arbitrary users, how do they render graphics then?
udev applies the `uaccess` tag, which, in coordination with systemd-logind, dynamically applies an ACL granting access to all locally logged-in users. The end result looks like this:
OK, then ignore my other email. Thanks for the update. Best regards Thomas
``` localuser@localhost:/dev/dri$ ls -l total 0 drwxr-xr-x 2 root root 80 Nov 27 09:26 by-path crw-rw----+ 1 root video 226, 0 Nov 27 09:26 card0 crw-rw----+ 1 root render 226, 128 Nov 27 09:26 renderD128
localuser@localhost:/dev/dri$ getfacl renderD128 # file: renderD128 # owner: root # group: render user::rw- user:localuser:rw- group::rw- mask::rw- other::--- ```
All the best Wolfgang
-- Thomas Zimmermann Graphics Driver Developer SUSE Software Solutions Germany GmbH Frankenstrasse 146, 90461 Nuernberg, Germany GF: Ivo Totev, Andrew Myers, Andrew McDonald, Boudien Moerman HRB 36809 (AG Nuernberg)