DimaZirix / podbox

Container sandbox for GUI applications
MIT License
27 stars 4 forks source link

/dev/dri exposed when --gui is used without --dri #2

Open awfulcooking opened 2 years ago

awfulcooking commented 2 years ago

Hey, checking out your project, and noticed this while reading the code.

Currently, --dri controls whether to mount /usr/lib64/dri

For security, I think it should be required for /dev/dri, too

DimaZirix commented 2 years ago

Ok, thanks. I will look for a right way to work with the dri