From: Alessandro Astone <alessandro.astone@canonical.com>
Date: Wed, 26 Nov 2025 16:30:52 +0000 (+0100)
Subject: rules: Tag DRM render nodes with xaccess
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=753341a2219e5a22cb9294aa68517994688ea12c;p=thirdparty%2Fsystemd.git

rules: Tag DRM render nodes with xaccess

When systemd is compiled with group-render-mode=0660, only the active seat
gets access to the render devices through uaccess. Remote desktop sessions
like gnome-remote-desktop would be left with no hardware rendering, because
those sessions are not associated with a seat.

Tag the render nodes with "xaccess" so that access is also granted to remote
sessions created with XDG_SESSION_EXTRA_DEVICE_ACCESS=1
---

diff --git a/rules.d/70-uaccess.rules.in b/rules.d/70-uaccess.rules.in
index 96b61cec32b..84ee00dcb0f 100644
--- a/rules.d/70-uaccess.rules.in
+++ b/rules.d/70-uaccess.rules.in
@@ -46,7 +46,7 @@ SUBSYSTEM=="firewire", TEST=="units", ENV{IEEE1394_UNIT_FUNCTION_VIDEO}=="1", TA
 SUBSYSTEM=="drm", KERNEL=="card*", TAG+="uaccess"
 {% if GROUP_RENDER_UACCESS %}
 # DRI render nodes
-SUBSYSTEM=="drm", KERNEL=="renderD*", TAG+="uaccess"
+SUBSYSTEM=="drm", KERNEL=="renderD*", TAG+="uaccess", TAG+="xaccess"
 {% endif %}
 {% if DEV_KVM_UACCESS %}
 # KVM