jeans/supervisor
jeans/supervisor
1
0
Fork 0
mirror of https://github.com/home-assistant/supervisor.git synced 2025-07-19 07:06:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

Drop full privileged from audio plugin (#2570)

Browse Source
This commit is contained in:
Pascal Vizeli 2021-02-16 08:40:19 +01:00 committed by GitHub
parent b61a747876
commit 59a82345a9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
supervisor/docker/audio.py
View File

@ -61,9 +61,8 @@ class DockerAudio(DockerInterface, CoreSysAttributes):
name=self.name, name=self.name,
hostname=self.name.replace("_", "-"), hostname=self.name.replace("_", "-"),
detach=True, detach=True,
privileged=True,
device_cgroup_rules=self.sys_hardware.policy.get_cgroups_rules( device_cgroup_rules=self.sys_hardware.policy.get_cgroups_rules(
PolicyGroup.AUDIO PolicyGroup.AUDIO, PolicyGroup.BLUETOOTH
), ),
environment={ENV_TIME: self.sys_config.timezone}, environment={ENV_TIME: self.sys_config.timezone},
volumes=self.volumes, volumes=self.volumes,

1
supervisor/hardware/const.py
View File

@ -35,6 +35,7 @@ class PolicyGroup(str, Enum):
USB = "usb" USB = "usb"
VIDEO = "video" VIDEO = "video"
AUDIO = "audio" AUDIO = "audio"
BLUETOOTH = "bluetooth"
class HardwareAction(str, Enum): class HardwareAction(str, Enum):

3
supervisor/hardware/policy.py
View File

@ -38,6 +38,9 @@ _CGROUPS: Dict[PolicyGroup, List[int]] = {
180, # hiddev (usbmisc) 180, # hiddev (usbmisc)
243 # hidraw (hidraw) 243 # hidraw (hidraw)
], ],
PolicyGroup.BLUETOOTH: [
13 # /dev/input (input)
]
} }
# fmt: on # fmt: on