felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): unify udev char dynamic assignment ranges.

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-17 12:46:27 +00:00
parent ceb4c582e1
commit e1a30cbf7d
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
19 changed files with 23 additions and 86 deletions
Download patch file Download diff file Expand all files Collapse all files

13
apparmor.d/profiles-m-r/nvtop
View file

@ -30,9 +30,7 @@ profile nvtop @{exec_path} flags=(attach_disconnected) {
@{run}/udev/data/+drm:card[0-9]-* r,
@{run}/udev/data/+pci:* r,
@{run}/udev/data/c226:@{int} r, # For /dev/dri/card*
@{run}/udev/data/c23[4-9]:@{int} r, # For dynamic assignment range 234 to 254
@{run}/udev/data/c24[0-9]:@{int} r,
@{run}/udev/data/c25[0-4]:@{int} r,
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{sys}/bus/ r,
@{sys}/class/ r,
@ -50,14 +48,7 @@ profile nvtop @{exec_path} flags=(attach_disconnected) {
@{PROC}/@{pids}/stat r,
@{PROC}/driver/nvidia/capabilities/mig/{config,monitor} r,
/dev/char/c23[4-9]:@{int} w, # For dynamic assignment range 234 to 254
/dev/char/c24[0-9]:@{int} w,
/dev/char/c25[0-4]:@{int} w,
/dev/char/c38[4-9]:@{int} w, # For dynamic assignment range 384 to 511
/dev/char/c39[0-9]:@{int} w,
/dev/char/c4[0-9][0-9]:@{int} w,
/dev/char/c50[0-9]:@{int} w,
/dev/char/c51[0-1]:@{int} w,
/dev/char/@{dynamic}:@{int} w, # For dynamic assignment range 234 to 254, 384 to 511
/dev/dri/ r,
/dev/nvidia-caps/{,nvidia-cap[0-9]*} rw,