Merge pull request #4851 from kmk3/groups-keep-vglusers

Keep vglusers group unless no3d is used (virtualgl)

2 files changed, 8 insertions, 1 deletions

diff --git a/src/firejail/main.c b/src/firejail/main.c
index 09e1a1071..8278cb62b 100644
--- a/src/firejail/main.c
+++ b/src/firejail/main.c
@@ -3150,13 +3150,18 @@ int main(int argc, char **argv, char **envp) {
                                 }
                         }
 
-                        // add render group
+                        // add render/vglusers group
                         if (!arg_no3d) {
                                 g = get_group_id("render");
                                 if (g) {
                                         sprintf(ptr, "%d %d 1\n", g, g);
                                         ptr += strlen(ptr);
                                 }
+                                g = get_group_id("vglusers");
+                                if (g) {
+                                        sprintf(ptr, "%d %d 1\n", g, g);
+                                        ptr += strlen(ptr);
+                                }
                         }
 
                         // add lp group
diff --git a/src/firejail/util.c b/src/firejail/util.c
index 5b8fd0b0f..79ebfa1dd 100644
--- a/src/firejail/util.c
+++ b/src/firejail/util.c
@@ -209,6 +209,8 @@ static void clean_supplementary_groups(gid_t gid) {
         if (!arg_no3d) {
                 copy_group_ifcont("render", groups, ngroups,
                                   new_groups, &new_ngroups, MAX_GROUPS);
+                copy_group_ifcont("vglusers", groups, ngroups,
+                                  new_groups, &new_ngroups, MAX_GROUPS);
         }
 
         if (!arg_noprinters) {