From 47520931bedf70fc5115d707472e69e68290b6fe Mon Sep 17 00:00:00 2001
From: Vincas Dargis <vindrg@gmail.com>
Date: Mon, 14 May 2018 20:52:22 +0300
Subject: [PATCH] Add Vulkan abstraction

Add abstraction for Vulkan API specific file paths.
---
 profiles/apparmor.d/abstractions/vulkan | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100644 profiles/apparmor.d/abstractions/vulkan

diff --git a/profiles/apparmor.d/abstractions/vulkan b/profiles/apparmor.d/abstractions/vulkan
new file mode 100644
index 000000000..4e991dfe2
--- /dev/null
+++ b/profiles/apparmor.d/abstractions/vulkan
@@ -0,0 +1,14 @@
+# vim:syntax=apparmor
+# Vulkan access requirements
+
+  # System files
+  /dev/dri/ r, # libvulkan_radeon.so, libvulkan_intel.so (Mesa)
+  /etc/vulkan/{explicit,implicit}_layer.d/{,*.json} r,
+  # for drmGetMinorNameForFD() from libvulkan_intel.so (Mesa)
+  /sys/devices/pci[0-9]*/*/drm/ r,
+  /usr/share/vulkan/icd.d/{,*.json} r,
+  /usr/share/vulkan/{explicit,implicit}_layer.d/{,*.json} r,
+
+  # User files
+  owner @{HOME}/.local/share/vulkan/implicit_layer.d/{,*.json} r,
+