diff --git a/runc-wrapper b/runc-wrapper
index b0a56b9..5ae2fd5 100755
--- a/runc-wrapper
+++ b/runc-wrapper
@@ -11,7 +11,17 @@ if [ -f config.json ]; then
 			"source": "/dev/kvm",
 			"options": [ "bind", "rw" ]
 		}
+	] |
+	.linux.resources.devices |= . + [
+		{
+			"allow": true,
+			"type": "c",
+			"major": 10,
+			"minor": 232,
+			"access": "rwm"
+		}
 	]' config.old.json > config.json
+	cp config.json /tmp/config.json
 fi
 
 exec $RUNC "$@"