Merge pull request #2241 from alexbelgium/codex/fix-issue-#2204-in-hassio-addons

Fix permissions for i915 enable_guc option in Jellyfin add-on

jellyfin/CHANGELOG.md

@@ -1,3 +1,6 @@
+## 10.11.3-2 (30-11-2025)
+- Allow `i915_enable_guc` to be applied on hosts that expose the runtime parameter by granting raw I/O capability and AppArmor access to `/sys/module/i915/parameters/enable_guc`.
+
 ## breaking_versions: 10.11.3-1 (23-11-2025)
 - Minor bugs fixed
 

jellyfin/apparmor.txt

@@ -21,9 +21,9 @@ profile addon_db21ed7f_jellyfin_nas flags=(attach_disconnected,mediate_deleted)
   capability setgid,
   capability setuid,
   capability sys_admin,
+  capability sys_rawio,
   capability dac_read_search,
   # capability dac_override,
-  # capability sys_rawio,
 
 # S6-Overlay
   /init ix,
@@ -53,6 +53,7 @@ profile addon_db21ed7f_jellyfin_nas flags=(attach_disconnected,mediate_deleted)
   /dev/mmcblk0p1 mrwkl,
   /dev/ttyUSB0 mrwkl,
   /dev/* mrwkl,
+  /sys/module/i915/parameters/enable_guc rwk,
   /tmp/** mrkwl,
   /opt/vc/lib/ mrkwl,
 

jellyfin/config.yaml

@@ -107,6 +107,7 @@ privileged:
   - SYS_ADMIN
   - DAC_READ_SEARCH
   - NET_ADMIN
+  - SYS_RAWIO
 schema:
   env_vars:
     - name: match(^[A-Za-z0-9_]+$)
@@ -125,5 +126,5 @@ schema:
 slug: jellyfin
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "10.11.3-1"
+version: "10.11.3-2"
 video: true