From fbb1768aa699b3f68c4d682b7dacfd362a1d091c Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Fri, 22 Aug 2025 18:46:26 +0200
Subject: [PATCH] feat(abs): add the amdgpu abstraction.

---
 apparmor.d/abstractions/amdgpu        | 30 +++++++++++++++++++++++++++
 apparmor.d/abstractions/graphics-full |  2 ++
 2 files changed, 32 insertions(+)
 create mode 100644 apparmor.d/abstractions/amdgpu

diff --git a/apparmor.d/abstractions/amdgpu b/apparmor.d/abstractions/amdgpu
new file mode 100644
index 000000000..181d86864
--- /dev/null
+++ b/apparmor.d/abstractions/amdgpu
@@ -0,0 +1,30 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+# Kernel Fusion Driver for AMD GPUs
+
+  abi <abi/4.0>,
+
+  @{sys}/devices/virtual/kfd/kfd/topology/nodes/@{int}/ r,
+  @{sys}/devices/virtual/kfd/kfd/topology/nodes/@{int}/properties r,
+
+  @{sys}/devices/virtual/kfd/kfd/dev r,
+  @{sys}/devices/virtual/kfd/kfd/topology/ r,
+  @{sys}/devices/virtual/kfd/kfd/topology/generation_id r,
+  @{sys}/devices/virtual/kfd/kfd/topology/nodes/ r,
+  @{sys}/devices/virtual/kfd/kfd/topology/nodes/@{int}/ r,
+  @{sys}/devices/virtual/kfd/kfd/topology/nodes/@{int}/caches/@{int}/properties r,
+  @{sys}/devices/virtual/kfd/kfd/topology/nodes/@{int}/gpu_id r,
+  @{sys}/devices/virtual/kfd/kfd/topology/nodes/@{int}/io_links/@{int}/properties r,
+  @{sys}/devices/virtual/kfd/kfd/topology/nodes/@{int}/mem_banks/@{int}/properties r,
+  @{sys}/devices/virtual/kfd/kfd/topology/nodes/@{int}/properties r,
+  @{sys}/devices/virtual/kfd/kfd/topology/system_properties r,
+  @{sys}/devices/virtual/kfd/kfd/uevent r,
+  @{sys}/module/amdgpu/initstate r,
+
+  /dev/kfd rw,
+
+  include if exists <abstractions/amdgpu.d>
+
+# vim:syntax=apparmor
diff --git a/apparmor.d/abstractions/graphics-full b/apparmor.d/abstractions/graphics-full
index eb60edb4d..1e2c97224 100644
--- a/apparmor.d/abstractions/graphics-full
+++ b/apparmor.d/abstractions/graphics-full
@@ -4,7 +4,9 @@
 
   abi <abi/4.0>,
 
+  include <abstractions/amdgpu>
   include <abstractions/graphics>
+  include <abstractions/oneapi>
 
   @{sys}/devices/@{pci}/numa_node r,