felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): add the app/kmod abstraction.

Browse source
This commit is contained in:
Alexandre Pujol 2024-06-16 21:50:48 +01:00
parent cb4f3af58e
commit 13b35b156e
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
14 changed files with 53 additions and 105 deletions
Download patch file Download diff file Expand all files Collapse all files

7
apparmor.d/groups/children/child-modprobe-nvidia
View file

@ -57,14 +57,11 @@ profile child-modprobe-nvidia flags=(attach_disconnected) {
profile kmod {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/app/kmod>
capability mknod,
# capability sys_module,
@{bin}/kmod mr,
/etc/modprobe.d/{,*.conf} r,
/etc/nvidia/{current,legacy*,tesla*}/*.conf r,
# @{sys}/module/ipmi_devintf/initstate r,
@ -72,8 +69,6 @@ profile child-modprobe-nvidia flags=(attach_disconnected) {
# @{sys}/module/{drm,nvidia}/initstate r,
@{sys}/module/compression r,
@{PROC}/cmdline r,
include if exists <local/child-modprobe-nvidia_kmod>
}

10
apparmor.d/groups/freedesktop/cpupower
View file

@ -43,15 +43,9 @@ profile cpupower @{exec_path} {
profile kmod {
include <abstractions/base>
include <abstractions/app/kmod>
@{bin}/kmod mr,
@{PROC}/cmdline r,
#@{PROC}/modules r,
/etc/modprobe.d/ r,
/etc/modprobe.d/*.conf r,
include if exists <local/cpupower_kmod>
}
include if exists <local/cpupower>