mirrors/apparmor
1
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor.git synced 2025-03-04 08:24:42 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Subject: nvidia abstractions cleanups

Browse source 
Merge from trunk commit 2090

Original message:
  Subject: profiles - nvidia abstraction cleanups
  
  This patch modifies the nvidia abstraction to add the livdpau wrapper
  config file for nvidia workarounds. It also converts the /proc/
  rules to use the @{PROC} tunable. And finally, it converts the
  ubuntu-browsers.d/multimedia abstraction to use the nvidia abstraction.
  
  Signed-off-by: Steve Beattie <sbeattie@ubuntu.com>
  Acked-By: Jamie Strandboge <jamie@canonical.com>

Nominated-by: Christian Boltz <apparmor@cboltz.de>
Acked-by: Steve Beattie <sbeattie@ubuntu.com>
This commit is contained in:
Steve Beattie 2013-01-04 09:34:43 -08:00
parent 0a97828f30
commit fc6889ae8e
2 changed files with 7 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
profiles/apparmor.d/abstractions/nvidia
View file

@ -4,9 +4,12 @@
# configuration queries
capability ipc_lock,
# libvdpau config file for nvidia workarounds
/etc/vdpau_wrapper.cfg r,
# device files
/dev/nvidia0 rw,
/dev/nvidiactl rw,
/proc/interrupts r,
/proc/sys/vm/max_map_count r,
@{PROC}/interrupts r,
@{PROC}/sys/vm/max_map_count r,

6
profiles/apparmor.d/abstractions/ubuntu-browsers.d/multimedia
View file

@ -50,10 +50,8 @@
/opt/google/talkplugin/GoogleTalkPlugin ixr,
owner @{HOME}/.config/google-googletalkplugin/** rw,
# If we allow the above, nvidia based systems will also need these
/dev/nvidactl rw,
/dev/nvidia0 rw,
@{PROC}/interrupts r,
# If we allow the above, nvidia based systems will also need this
#include <abstractions/nvidia>
# Virus scanners
/usr/bin/clamscan Cx -> sanitized_helper,