Comment 14 for bug 1817943

That is odd, it should have:
/sys/devices/*/*/{uevent,vendor,device,subsystem_vendor,subsystem_device} r,
/sys/devices/*/*/drm/*/{uevent,vendor,device,subsystem_vendor,subsystem_device} r

And I'd have thought your remaining rules should be under that:

/sys/devices/pci0000:00/0000:00:03.1/0000:1c:00.0/drm/renderD128/{uevent,vendor,device,subsystem_vendor,subsystem_device} r,

It turns out you have a deeper pathing with one more directory :-/

I wonder if that would be more appropriate:
- /using (**) to get any depth of device cascading in /sys
- since we have ** we can drop the drm as it doesn't matter anymore

/sys/devices/**/{uevent,vendor,device,subsystem_vendor,subsystem_device} r,

That most likely works, but needs security ack as it is slightly more open.

@Brian - could you use the rule I posted above instead of yours of comment #12 and see if that would work?