search

netblue30 / firejail

Linux namespaces and seccomp-bpf sandbox
https://firejail.wordpress.com
GNU General Public License v2.0
5.83k stars 568 forks source link

modif: private-dev: keep /dev/kfd unless no3d is used #6380

Closed kmk3 closed 5 months ago

kmk3 commented 5 months ago

Apparently hashcat needs access to this device for hardware acceleration on AMD gpus and private-dev currently breaks that (see #6364).

It seems to be used by the "amdgpu" and "amdkfd" Linux kernel drivers and as with /dev/dri/renderD128, this file is owned by the "render" group.

Relevant udev rules from /usr/lib/udev/rules.d/50-udev-default.rules:

SUBSYSTEM=="drm", KERNEL=="renderD*", GROUP="render", MODE="0666"
SUBSYSTEM=="kfd", GROUP="render", MODE="0666"
SUBSYSTEM=="accel", GROUP="render", MODE="0666"

Environment: udev 255.6-1 on Artix Linux.

Reported-by: @schrotthaufen