From e53b5070e046ef32214c5f21c6d59b13f56a49eb Mon Sep 17 00:00:00 2001
From: Daniel J Walsh <dwalsh@redhat.com>
Date: Tue, 28 Nov 2023 12:18:09 -0500
Subject: [PATCH] Default to allowing containers to use dri devices

Fixes: https://github.com/containers/container-selinux/issues/269

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
---
 container.te | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/container.te b/container.te
index 834f501..d1b7b33 100644
--- a/container.te
+++ b/container.te
@@ -1,4 +1,4 @@
-policy_module(container, 2.225.1)
+policy_module(container, 2.226.0)
 
 gen_require(`
 	class passwd rootok;
@@ -43,7 +43,7 @@ gen_tunable(container_use_devices, false)
 ##  Allow containers to use any dri device volume mounted into container
 ##  </p>
 ## </desc>
-gen_tunable(container_use_dri_devices, false)
+gen_tunable(container_use_dri_devices, true)
 
 ## <desc>
 ## <p>