mirrors/apparmor.d
1
0
Fork 0
mirror of https://github.com/roddhjav/apparmor.d.git synced 2024-11-14 23:43:56 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix(abs): base: allow inherited mesa cache

Browse Source 
mesa 24.2 introduced a shader disk cache which is enabled by default, which opens quite a lot of fd. They are not closed and get inherited by child programs.

Denying it can cause crash, so we are allowing it globally while the issue is beeing fixed in mesa.

See: https://gitlab.freedesktop.org/mesa/mesa/-/issues/11810
This commit is contained in:
Alexandre Pujol 2024-09-13 20:07:41 +01:00
parent db064b651e
commit 4ccf2156de
No known key found for this signature in database
GPG Key ID: C5469996F0DF68EC
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
apparmor.d/abstractions/base.d/complete
View File

@ -24,6 +24,12 @@
@{etc_rw}/localtime r, @{etc_rw}/localtime r,
/etc/locale.conf r, /etc/locale.conf r,
# mesa 24.2 introduced a shader disk cache which opens quite a lot of fd.
# They are not closed and get inherited by child programs. Denying it can cause
# crash, so we are allowing it globally while the issue is beeing fixed in mesa.
owner @{user_cache_dirs}/mesa_shader_cache_db/part@{int}/mesa_cache.db rw,
owner @{user_cache_dirs}/mesa_shader_cache_db/part@{int}/mesa_cache.idx rw,
@{sys}/devices/system/cpu/possible r, @{sys}/devices/system/cpu/possible r,
@{PROC}/sys/kernel/core_pattern r, @{PROC}/sys/kernel/core_pattern r,