diff options
| author | Ophestra <cat@gensokyo.uk> | 2024-12-22 12:37:24 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2024-12-22 12:37:24 +0900 |
| commit | f608f28a6ab6fdba9c357913a28afe476f4f7344 (patch) | |
| tree | 7faeedf153ffc8e060b1d6757ad601e954f6414e /internal/app/seal.go | |
| parent | aecfae18749b7f1c22bb37c706a1043147680d50 (diff) | |
app: mount /dev/kvm in permissive defaults
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'internal/app/seal.go')
| -rw-r--r-- | internal/app/seal.go | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/internal/app/seal.go b/internal/app/seal.go index b17388fb..f3dbfbd0 100644 --- a/internal/app/seal.go +++ b/internal/app/seal.go @@ -201,6 +201,8 @@ func (a *app) Seal(config *fst.Config) error { if config.Confinement.Enablements.Has(system.EX11) || config.Confinement.Enablements.Has(system.EWayland) { conf.Filesystem = append(conf.Filesystem, &fst.FilesystemConfig{Src: "/dev/dri", Device: true}) } + // opportunistically bind kvm + conf.Filesystem = append(conf.Filesystem, &fst.FilesystemConfig{Src: "/dev/kvm", Device: true}) config.Confinement.Sandbox = conf } |