apparmor/profiles/apparmor.d/abstractions/vulkan

# vim:syntax=apparmor
# Vulkan access requirements

  # System files
  /dev/dri/ r, # libvulkan_radeon.so, libvulkan_intel.so (Mesa)
  /etc/vulkan/{explicit,implicit}_layer.d/{,*.json} r,
  # for drmGetMinorNameForFD() from libvulkan_intel.so (Mesa)
  @{sys}/devices/pci[0-9]*/*/drm/ r,
  /usr/share/vulkan/icd.d/{,*.json} r,
  /usr/share/vulkan/{explicit,implicit}_layer.d/{,*.json} r,

  # User files
  owner @{HOME}/.local/share/vulkan/implicit_layer.d/{,*.json} r,
Add Vulkan abstraction Add abstraction for Vulkan API specific file paths. 2018-05-14 20:52:22 +03:00			`# vim:syntax=apparmor`
			`# Vulkan access requirements`

			`# System files`
			`/dev/dri/ r, # libvulkan_radeon.so, libvulkan_intel.so (Mesa)`
			`/etc/vulkan/{explicit,implicit}_layer.d/{,*.json} r,`
			`# for drmGetMinorNameForFD() from libvulkan_intel.so (Mesa)`
Use @{sys} tunable in profiles and abstractions Commit aa065287909f6a3115bfaf02bee85d323e46b706 made @{sys} tunable available by default. Update profiles and abstractions to actually use @{sys} tunable for better confinement in the future (when @{sys} becomes kernel var). Closes LP#1728551 2018-11-08 20:00:45 +02:00			`@{sys}/devices/pci[0-9]//drm/ r,`
Add Vulkan abstraction Add abstraction for Vulkan API specific file paths. 2018-05-14 20:52:22 +03:00			`/usr/share/vulkan/icd.d/{,*.json} r,`
			`/usr/share/vulkan/{explicit,implicit}_layer.d/{,*.json} r,`

			`# User files`
			`owner @{HOME}/.local/share/vulkan/implicit_layer.d/{,*.json} r,`