mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

abstractions/opencl-nvidia: don't allow PUx on nvidia-modprobe

Browse source
This commit is contained in:
Jamie Strandboge 2018-09-27 11:38:51 -05:00
parent ae771b475a
commit 8f9bd5b0e3
1 changed files with 7 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

8
profiles/apparmor.d/abstractions/opencl-nvidia
View file

@ -6,7 +6,13 @@
# Executables
/usr/bin/nvidia-modprobe PUx,
# https://github.com/NVIDIA/nvidia-modprobe
# This setuid executable is used to create various device files and load the
# the nvidia kernel module and is therefore not appropriate for a general
# purpose abstraction. Confined applications currently need to add this rule
# in their policy. At some point, a profile may be provided for this command
# such that Px would succeed.
#/usr/bin/nvidia-modprobe Pix,
# System files