From 084616540d12c111f8876c1e104f062851caa04db255e014257bb32add583322 Mon Sep 17 00:00:00 2001 From: Franck Bui Date: Fri, 1 Dec 2023 08:01:25 +0000 Subject: [PATCH] Accepting request 1128161 from home:wfrisch:branches:Base:System - udev: Tighten permissions for DRM render nodes (bsc#1217118). Note that this implicitly enables `uaccess`, so any logged-in user still gets access regardless of group membership. Some use cases, e.g. remote access via ssh, might require you to add the desired user to the `render` group. OBS-URL: https://build.opensuse.org/request/show/1128161 OBS-URL: https://build.opensuse.org/package/show/Base:System/systemd?expand=0&rev=1473 --- systemd.changes | 8 ++++++++ systemd.spec | 1 + 2 files changed, 9 insertions(+) diff --git a/systemd.changes b/systemd.changes index 09e1b435..bdc55237 100644 --- a/systemd.changes +++ b/systemd.changes @@ -1,3 +1,11 @@ +------------------------------------------------------------------- +Tue Nov 21 13:57:52 UTC 2023 - Wolfgang Frisch + +- udev: Tighten permissions for DRM render nodes (bsc#1217118). Note that this + implicitly enables `uaccess`, so any logged-in user still gets access + regardless of group membership. Some use cases, e.g. remote access via ssh, + might require you to add the desired user to the `render` group. + ------------------------------------------------------------------- Thu Nov 2 08:56:57 UTC 2023 - Franck Bui diff --git a/systemd.spec b/systemd.spec index f6cd92d7..676f4bb8 100644 --- a/systemd.spec +++ b/systemd.spec @@ -721,6 +721,7 @@ export CFLAGS="%{optflags} -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2" -Dclock-valid-range-usec-max=946728000000000 \ -Dadm-group=false \ -Dwheel-group=false \ + -Dgroup-render-mode=0660 \ -Dutmp=false \ -Ddefault-hierarchy=unified \ -Ddefault-kill-user-processes=false \