temporary fix for nvidia/nogroups/noroot issue (#3644, #841)

1 files changed, 7 insertions, 1 deletions

diff --git a/src/firejail/profile.c b/src/firejail/profile.c
index 793171e1f..bed9bcc7e 100644
--- a/src/firejail/profile.c
+++ b/src/firejail/profile.c
@@ -402,7 +402,13 @@ int profile_check_line(char *ptr, int lineno, const char *fname) {
                 return 0;
         }
         else if (strcmp(ptr, "nogroups") == 0) {
-                arg_nogroups = 1;
+                // nvidia cards require video group; disable nogroups
+                if (access("/dev/nvidiactl", R_OK) == 0) {
+                        fwarning("Warning: NVIDIA card detected, nogroups command disabled\n");
+                        arg_nogroups = 0;
+                }
+                else
+                        arg_nogroups = 1;
                 return 0;
         }
         else if (strcmp(ptr, "nosound") == 0) {