From f2a8cac7b07db4fc17ed8d7e5e548d836c2f911f Mon Sep 17 00:00:00 2001
From: Alexandre <44178713+alexbelgium@users.noreply.github.com>
Date: Fri, 28 Nov 2025 19:27:50 +0100
Subject: [PATCH] Fix permissions for i915 enable_guc option

---
 jellyfin/CHANGELOG.md | 4 ++++
 jellyfin/apparmor.txt | 3 ++-
 jellyfin/config.yaml  | 3 ++-
 3 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/jellyfin/CHANGELOG.md b/jellyfin/CHANGELOG.md
index 39c2f5f89..a33c84f46 100644
--- a/jellyfin/CHANGELOG.md
+++ b/jellyfin/CHANGELOG.md
@@ -1,3 +1,7 @@
+## 10.11.3-2 (30-11-2025)
+- Allow `i915_enable_guc` to be applied on hosts that expose the runtime parameter by granting raw I/O capability and AppArmor a
+ccess to `/sys/module/i915/parameters/enable_guc`.
+
 ## breaking_versions: 10.11.3-1 (23-11-2025)
 - Minor bugs fixed
 
diff --git a/jellyfin/apparmor.txt b/jellyfin/apparmor.txt
index e399fa741..ab32eaf39 100644
--- a/jellyfin/apparmor.txt
+++ b/jellyfin/apparmor.txt
@@ -21,9 +21,9 @@ profile addon_db21ed7f_jellyfin_nas flags=(attach_disconnected,mediate_deleted)
   capability setgid,
   capability setuid,
   capability sys_admin,
+  capability sys_rawio,
   capability dac_read_search,
   # capability dac_override,
-  # capability sys_rawio,
 
 # S6-Overlay
   /init ix,
@@ -53,6 +53,7 @@ profile addon_db21ed7f_jellyfin_nas flags=(attach_disconnected,mediate_deleted)
   /dev/mmcblk0p1 mrwkl,
   /dev/ttyUSB0 mrwkl,
   /dev/* mrwkl,
+  /sys/module/i915/parameters/enable_guc rwk,
   /tmp/** mrkwl,
   /opt/vc/lib/ mrkwl,
 
diff --git a/jellyfin/config.yaml b/jellyfin/config.yaml
index e36823ab5..f875fb922 100644
--- a/jellyfin/config.yaml
+++ b/jellyfin/config.yaml
@@ -107,6 +107,7 @@ privileged:
   - SYS_ADMIN
   - DAC_READ_SEARCH
   - NET_ADMIN
+  - SYS_RAWIO
 schema:
   env_vars:
     - name: match(^[A-Za-z0-9_]+$)
@@ -125,5 +126,5 @@ schema:
 slug: jellyfin
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "10.11.3-1"
+version: "10.11.3-2"
 video: true