apparmor/profiles/apparmor.d/abstractions/opencl-common

# vim:syntax=apparmor
# implementation-independent OpenCL access requirements

  # System files

  /etc/OpenCL/** r,
  @{sys}/bus/pci/devices/ r, # libpocl.so -> libhwlock.so, libnvidia-opencl.so, beignet/libcl.so -> libdrm_intel.so
  @{sys}/devices/system/node/ r, # for clGetPlatformIDs() from libOpenCL.so
  @{sys}/devices/system/node/node[0-9]*/meminfo r, # for clGetPlatformIDs() from libOpenCL.so


  # Include additions to the abstraction
  #include if exists <abstractions/opencl-common.d>
Add OpenCL abstractions 2018-05-13 20:14:15 +00:00			`# vim:syntax=apparmor`
			`# implementation-independent OpenCL access requirements`

			`# System files`

			`/etc/OpenCL/** r,`
Use @{sys} tunable in profiles and abstractions Commit aa065287909f6a3115bfaf02bee85d323e46b706 made @{sys} tunable available by default. Update profiles and abstractions to actually use @{sys} tunable for better confinement in the future (when @{sys} becomes kernel var). Closes LP#1728551 2018-11-08 20:00:45 +02:00			`@{sys}/bus/pci/devices/ r, # libpocl.so -> libhwlock.so, libnvidia-opencl.so, beignet/libcl.so -> libdrm_intel.so`
			`@{sys}/devices/system/node/ r, # for clGetPlatformIDs() from libOpenCL.so`
			`@{sys}/devices/system/node/node[0-9]*/meminfo r, # for clGetPlatformIDs() from libOpenCL.so`
Add OpenCL abstractions 2018-05-13 20:14:15 +00:00
Add support for local additions to abstractions Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com> 2019-01-24 03:03:11 -08:00
			`# Include additions to the abstraction`
			`#include if exists <abstractions/opencl-common.d>`