felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat: precise nvidia devices number.

Browse source
This commit is contained in:
Alexandre Pujol 2025-08-31 13:23:48 +02:00
parent 45faf0eee0
commit a3426fef8c
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
3 changed files with 3 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

2
apparmor.d/abstractions/nvidia-strict
View file

@ -35,7 +35,7 @@
owner @{PROC}/@{pid}/comm r, owner @{PROC}/@{pid}/comm r,
owner @{PROC}/@{pid}/task/@{tid}/comm r, owner @{PROC}/@{pid}/task/@{tid}/comm r,
/dev/char/195:@{int} w, # Nvidia graphics devices /dev/char/195:@{u8} w, # Nvidia graphics devices
/dev/nvidia-modeset rw, /dev/nvidia-modeset rw,
/dev/nvidia@{int} rw, /dev/nvidia@{int} rw,
/dev/nvidiactl rw, /dev/nvidiactl rw,

2
apparmor.d/abstractions/nvidia.d/complete
View file

@ -8,6 +8,6 @@
/etc/nvidia/nvidia-application-profiles* r, /etc/nvidia/nvidia-application-profiles* r,
/dev/char/195:@{int} rw, # Nvidia graphics devices /dev/char/195:@{u8} rw, # Nvidia graphics devices
# vim:syntax=apparmor # vim:syntax=apparmor

2
apparmor.d/groups/children/child-modprobe-nvidia
View file

@ -41,7 +41,7 @@ profile child-modprobe-nvidia flags=(attach_disconnected) {
@{PROC}/modules r, @{PROC}/modules r,
owner /dev/char/@{dynamic}:@{int} w, # For dynamic assignment range 234 to 254, 384 to 511 owner /dev/char/@{dynamic}:@{int} w, # For dynamic assignment range 234 to 254, 384 to 511
owner /dev/char/195:@{int} w, # Nvidia graphics devices owner /dev/char/195:@{u8} w, # Nvidia graphics devices
/dev/nvidia-modeset w, /dev/nvidia-modeset w,
/dev/nvidia-uvm w, /dev/nvidia-uvm w,