apparmor/profiles/apparmor.d/abstractions/dri-enumerate

# vim:syntax=apparmor

# This file contains common DRI-specific rules useful for GUI applications that
# needs to enumerate graphic devices (as with drmParsePciDeviceInfo() from
# libdrm).

  @{sys}/devices/pci[0-9]*/**/{device,subsystem_device,subsystem_vendor,uevent,vendor} r,
Add dri-enumerate abstraction Create new dri-enumerate abstraction with rules needed for some GUI applications allowing to get GPU device information. 2018-02-04 14:22:33 +02:00			`# vim:syntax=apparmor`

			`# This file contains common DRI-specific rules useful for GUI applications that`
			`# needs to enumerate graphic devices (as with drmParsePciDeviceInfo() from`
			`# libdrm).`

Use @{sys} tunable in profiles and abstractions Commit aa065287909f6a3115bfaf02bee85d323e46b706 made @{sys} tunable available by default. Update profiles and abstractions to actually use @{sys} tunable for better confinement in the future (when @{sys} becomes kernel var). Closes LP#1728551 2018-11-08 20:00:45 +02:00			`@{sys}/devices/pci[0-9]/*/{device,subsystem_device,subsystem_vendor,uevent,vendor} r,`
Add dri-enumerate abstraction Create new dri-enumerate abstraction with rules needed for some GUI applications allowing to get GPU device information. 2018-02-04 14:22:33 +02:00