felipe/apparmor.d
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore(abs): add some device description.

Browse source
This commit is contained in:
Alexandre Pujol 2025-09-13 00:02:35 +02:00
parent 53501d8bf4
commit fda74f574f
No known key found for this signature in database
GPG key ID: C5469996F0DF68EC
2 changed files with 9 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
apparmor.d/abstractions/dri
View file

@ -28,8 +28,11 @@
@{sys}/devices/@{pci}/uevent r, @{sys}/devices/@{pci}/uevent r,
@{sys}/devices/@{pci}/vendor r, @{sys}/devices/@{pci}/vendor r,
# Allow access to all cards
/dev/dri/ r, /dev/dri/ r,
/dev/dri/card@{int} rw, /dev/dri/card@{int} rw,
# Video Acceleration API
/dev/dri/renderD128 rw, /dev/dri/renderD128 rw,
/dev/dri/renderD129 rw, /dev/dri/renderD129 rw,

6
apparmor.d/abstractions/nvidia-strict
View file

@ -36,8 +36,14 @@
owner @{PROC}/@{pid}/task/@{tid}/comm r, owner @{PROC}/@{pid}/task/@{tid}/comm r,
/dev/char/195:@{u8} w, # Nvidia graphics devices /dev/char/195:@{u8} w, # Nvidia graphics devices
# Nvidia proprietary modset driver
/dev/nvidia-modeset rw, /dev/nvidia-modeset rw,
# Nvidia graphics devices
/dev/nvidia@{int} rw, /dev/nvidia@{int} rw,
# Nvidia's control device
/dev/nvidiactl rw, /dev/nvidiactl rw,
deny owner @{HOME}/.nv/.local/share/gvfs-metadata/* r, deny owner @{HOME}/.nv/.local/share/gvfs-metadata/* r,