mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-15 16:03:51 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat(profile): start using child-modprobe-nvidia.

Browse Source
This commit is contained in:
Alexandre Pujol 2024-04-08 18:07:18 +01:00
parent 6cbaefc4d5
commit 1919d90770
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
3 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apparmor.d/abstractions/graphics-full
View File

@ -4,8 +4,6 @@
include <abstractions/graphics> include <abstractions/graphics>
@{bin}/nvidia-modprobe Px -> nvidia_modprobe,
/dev/char/@{dynamic}:@{int} w, # For dynamic assignment range 234 to 254, 384 to 511 /dev/char/@{dynamic}:@{int} w, # For dynamic assignment range 234 to 254, 384 to 511
/dev/nvidia-uvm rw, /dev/nvidia-uvm rw,
/dev/nvidia-uvm-tools rw, /dev/nvidia-uvm-tools rw,

2
apparmor.d/abstractions/nvidia-strict
View File

@ -2,6 +2,8 @@
# Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io> # Copyright (C) 2021-2024 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only # SPDX-License-Identifier: GPL-2.0-only
@{bin}/nvidia-modprobe Px -> child-modprobe-nvidia,
/usr/share/nvidia/nvidia-application-profiles-* r, /usr/share/nvidia/nvidia-application-profiles-* r,
/etc/nvidia/nvidia-application-profiles-* r, /etc/nvidia/nvidia-application-profiles-* r,

4
apparmor.d/groups/children/child-modprobe-nvidia
View File

@ -30,8 +30,6 @@ profile child-modprobe-nvidia {
@{bin}/kmod Cx -> kmod, @{bin}/kmod Cx -> kmod,
# /dev/nvidia-uvm w,
# /dev/nvidia-uvm-tools w,
@{sys}/bus/pci/devices/ r, @{sys}/bus/pci/devices/ r,
@{sys}/devices/@{pci}/config r, @{sys}/devices/@{pci}/config r,
@ -47,6 +45,8 @@ profile child-modprobe-nvidia {
owner /dev/char/195:@{int} w, # Nvidia graphics devices owner /dev/char/195:@{int} w, # Nvidia graphics devices
/dev/nvidia-modeset w, /dev/nvidia-modeset w,
/dev/nvidia-uvm w,
/dev/nvidia-uvm-tools w,
/dev/nvidia@{int} rw, /dev/nvidia@{int} rw,
/dev/nvidiactl rw, /dev/nvidiactl rw,
owner /dev/nvidia-caps/ w, owner /dev/nvidia-caps/ w,