felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

feat(profile): start using new abstractions (3)

Browse source
This commit is contained in:
Alexandre Pujol 2023-12-19 23:49:30 +00:00
parent a79a3f3311
commit ef1776b8d5
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
20 changed files with 34 additions and 167 deletions
Download patch file Download diff file Expand all files Collapse all files

5
apparmor.d/profiles-m-r/mpv
View file

@ -15,13 +15,11 @@ profile mpv @{exec_path} {
include <abstractions/fontconfig-cache-read>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/mesa>
include <abstractions/graphics>
include <abstractions/nameservice-strict>
include <abstractions/opencl>
include <abstractions/openssl>
include <abstractions/ssl_certs>
include <abstractions/user-download-strict>
include <abstractions/vulkan>
network inet dgram,
network inet6 dgram,
@ -41,7 +39,6 @@ profile mpv @{exec_path} {
@{bin}/youtube-dl rPx,
@{bin}/yt-dlp rPx,
/usr/share/libdrm/{,**} r,
/usr/share/pipewire/client-rt.conf r,
/etc/libva.conf r,

5
apparmor.d/profiles-m-r/nvidia-settings
View file

@ -10,9 +10,8 @@ include <tunables/global>
profile nvidia-settings @{exec_path} {
include <abstractions/base>
include <abstractions/dconf-write>
include <abstractions/fonts>
include <abstractions/freedesktop.org>
include <abstractions/opencl-nvidia>
include <abstractions/desktop>
include <abstractions/nvidia-strict>
@{exec_path} mr,

10
apparmor.d/profiles-m-r/nvtop
View file

@ -10,11 +10,8 @@ include <tunables/global>
profile nvtop @{exec_path} flags=(attach_disconnected) {
include <abstractions/base>
include <abstractions/consoles>
include <abstractions/dri-common>
include <abstractions/dri-enumerate>
include <abstractions/graphics-full>
include <abstractions/nameservice-strict>
include <abstractions/opencl-nvidia>
include <abstractions/vulkan>
capability sys_ptrace,
@ -33,9 +30,6 @@ profile nvtop @{exec_path} flags=(attach_disconnected) {
@{run}/udev/data/c@{dynamic}:@{int} r, # For dynamic assignment range 234 to 254, 384 to 511
@{sys}/bus/ r,
@{sys}/class/ r,
@{sys}/class/drm/ r,
@{sys}/devices/@{pci}/drm/card@{int}/gt_*_freq_mhz r,
@{sys}/devices/@{pci}/enable r,
@{sys}/devices/system/node/node@{int}/cpumap r,
@ -48,8 +42,6 @@ profile nvtop @{exec_path} flags=(attach_disconnected) {
@{PROC}/@{pids}/stat r,
@{PROC}/driver/nvidia/capabilities/mig/{config,monitor} r,
/dev/char/@{dynamic}:@{int} w, # For dynamic assignment range 234 to 254, 384 to 511
/dev/dri/ r,
/dev/nvidia-caps/ rw,
/dev/nvidia-caps/nvidia-cap@{int} rw,