From c3d9c9ea4889ded282c56567bd526f223332c730 Mon Sep 17 00:00:00 2001
From: Alexandre Pujol <alexandre@pujol.io>
Date: Mon, 18 Dec 2023 19:22:27 +0000
Subject: [PATCH] feat(abs): add a new dri abstaction.

---
 apparmor.d/abstractions/dri | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)
 create mode 100644 apparmor.d/abstractions/dri

diff --git a/apparmor.d/abstractions/dri b/apparmor.d/abstractions/dri
new file mode 100644
index 00000000..844c664a
--- /dev/null
+++ b/apparmor.d/abstractions/dri
@@ -0,0 +1,34 @@
+# apparmor.d - Full set of apparmor profiles
+# Copyright (C) 2023 Alexandre Pujol <alexandre@pujol.io>
+# SPDX-License-Identifier: GPL-2.0-only
+
+# The Direct Rendering Infrastructure (DRI) is the framework comprising the modern
+# Linux graphics stack which allows unprivileged user-space programs to issue 
+# commands to graphics hardware without conflicting with other programs.
+
+  @{lib}/dri/**                 mr,
+  @{lib}/@{multiarch}/dri/**    mr,
+  @{lib}/fglrx/dri/**           mr,
+
+  /usr/share/drirc.d/ r,
+  /usr/share/drirc.d/*.conf r,
+
+  /etc/drirc r,
+
+  @{sys}/devices/@{pci}/class r,
+  @{sys}/devices/@{pci}/config r,
+  @{sys}/devices/@{pci}/device r,
+  @{sys}/devices/@{pci}/irq r,
+  @{sys}/devices/@{pci}/resource r,
+  @{sys}/devices/@{pci}/revision r,
+  @{sys}/devices/@{pci}/subsystem_device r,
+  @{sys}/devices/@{pci}/subsystem_vendor r,
+  @{sys}/devices/@{pci}/uevent r,
+  @{sys}/devices/@{pci}/vendor r,
+
+  /dev/dri/ r,
+  /dev/dri/card@{int} rw,
+  /dev/dri/renderD128 rw,
+  /dev/dri/renderD129 rw,
+
+  include if exists <abstractions/dri.d>