app_containers: Set DeviceAllow properly

/dev/dri and /dev/shm are NOT devices.
This commit is contained in:
Peter Cai 2022-12-26 08:32:01 -05:00
parent c64e51a244
commit 2e6e29ed34
1 changed files with 1 additions and 2 deletions

View File

@ -49,8 +49,7 @@ SUDO_ASKPASS=$HOME/.local/bin/askpass-bemenu sudo -A systemd-nspawn -M $CONTAINE
`# GPU` \
--bind=/dev/dri \
--bind=/dev/shm \
--property=DeviceAllow='/dev/dri rw' \
--property=DeviceAllow='/dev/shm rw' \
--property=DeviceAllow='char-drm rw' \
`# Input devices` \
--bind-ro=/dev/input \
--property=DeviceAllow='char-input r' \