diff --git a/runtime/Cargo.toml b/runtime/Cargo.toml
index c1caf7c9..496e349b 100644
--- a/runtime/Cargo.toml
+++ b/runtime/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "ya-runtime-vm"
-version = "0.4.1"
+version = "0.4.2"
 authors = ["Golem Factory <contact@golem.network>"]
 edition = "2021"
 license = "GPL-3.0"
diff --git a/runtime/conf/ya-runtime-vm.json b/runtime/conf/ya-runtime-vm.json
index 4ece20ed..32a1686c 100644
--- a/runtime/conf/ya-runtime-vm.json
+++ b/runtime/conf/ya-runtime-vm.json
@@ -1,7 +1,7 @@
 [
   {
     "name": "vm",
-    "version": "0.4.1",
+    "version": "0.4.2",
     "supervisor-path": "exe-unit",
     "runtime-path": "ya-runtime-vm/ya-runtime-vm",
     "description": "vm runtime",
diff --git a/runtime/init-container/src/init.c b/runtime/init-container/src/init.c
index cd78c7e0..885b6b56 100644
--- a/runtime/init-container/src/init.c
+++ b/runtime/init-container/src/init.c
@@ -838,7 +838,7 @@ static noreturn void child_wrapper(int parent_pipe[2],
                 case CAP_LEASE:
                 case CAP_LINUX_IMMUTABLE:
                 // case CAP_MKNOD:
-                // cas CAP_NET_ADMIN:
+                // case CAP_NET_ADMIN:
                 case CAP_NET_BIND_SERVICE:
                 case CAP_NET_BROADCAST:
                 case CAP_NET_RAW:
@@ -2241,7 +2241,7 @@ int main(int argc, char **argv) {
                 MS_NODEV | MS_NOSUID | MS_NOEXEC,
                 NULL));
 
-    bool do_sandbox = true;
+    bool do_sandbox = nvidia_loaded;
     for (int i = 1; i < argc; ++i) {
         fprintf(stderr, "Command line argument: %s\n", argv[i]);
         if (strcmp(argv[i], "sandbox=yes") == 0) {