felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(abs): graphics: limit access to cpu sys value.

Browse source
This commit is contained in:
Alexandre Pujol 2025-09-13 00:42:10 +02:00
parent 170575fbff
commit 34cc1ab131
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
1 changed files with 11 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

14
apparmor.d/abstractions/graphics
View file

@ -13,14 +13,22 @@
/etc/libva.conf r,
@{sys}/bus/pci/devices/ r,
@{sys}/devices/system/cpu/cpu@{int}/cache/index@{int}/* r,
@{sys}/devices/system/cpu/cpu@{int}/cache/index@{int}/id r,
@{sys}/devices/system/cpu/cpu@{int}/cache/index@{int}/level r,
@{sys}/devices/system/cpu/cpu@{int}/cache/index@{int}/size r,
@{sys}/devices/system/cpu/cpu@{int}/cpu_capacity r,
@{sys}/devices/system/cpu/cpu@{int}/online r,
@{sys}/devices/system/cpu/cpu@{int}/topology/* r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/* r,
@{sys}/devices/system/cpu/cpu@{int}/topology/core_cpus r,
@{sys}/devices/system/cpu/cpu@{int}/topology/physical_package_id r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/cpuinfo_max_freq r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_cur_freq r,
@{sys}/devices/system/cpu/cpufreq/policy@{int}/scaling_max_freq r,
@{sys}/devices/system/cpu/present r,
@{sys}/devices/system/node/ r,
@{sys}/devices/system/node/node@{int}/meminfo r,
@{sys}/devices/system/node/node@{int}/cpumap r,
include if exists <abstractions/graphics.d>