feat(profiles): general update.

2022-06-25 00:16:05 +01:00 · 2022-06-25 00:16:05 +01:00 · fcbe764ccf
commit fcbe764ccf
parent e942c057bd
36 changed files with 154 additions and 74 deletions
--- a/apparmor.d/groups/systemd/systemd-udevd
+++ b/apparmor.d/groups/systemd/systemd-udevd
@ -92,6 +92,7 @@ profile systemd-udevd @{exec_path} flags=(attach_disconnected complain) {
  owner @{PROC}/@{pid}/fd/ r,
        @{PROC}/@{pids}/cgroup r,
        @{PROC}/devices r,
+        @{PROC}/driver/nvidia/gpus/ r,

  /dev/ rw,
  /dev/** rwk,
--- a/apparmor.d/groups/systemd/systemd-vconsole-setup
+++ b/apparmor.d/groups/systemd/systemd-vconsole-setup
@ -13,6 +13,7 @@ profile systemd-vconsole-setup @{exec_path} {
  include <abstractions/nameservice-strict>
  include <abstractions/systemd-common>

+  capability dac_override,
  capability sys_ptrace,
  capability sys_resource,
  capability sys_tty_config,