mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 17:31:01 +01:00
730db17607
Tag profiles and abstractions with abi information. Tagging abstractions is not strictly necessary but allows the parser to detect when their is a mismatch and that policy will need an update for abi. We do not currently tag the tunables because variable declarations are not currently affected by abi. MR: https://gitlab.com/apparmor/apparmor/-/merge_requests/491 Signed-off-by: John Johansen <john.johansen@canonical.com> Acked-by: Steve Beattie <sbeattie@ubuntu.com>
23 lines
676 B
Text
23 lines
676 B
Text
# vim:syntax=apparmor
|
|
|
|
abi <abi/3.0>,
|
|
|
|
# OpenCL access requirements for Intel implementation
|
|
|
|
#include <abstractions/opencl-common>
|
|
|
|
# for libcl.so (libOpenCL.so -> beignet/libcl.so calls XOpenDisplay())
|
|
#include <abstractions/X>
|
|
|
|
# for libOpenCL.so -> beignet/libcl.so -> libpciaccess.so
|
|
#include <abstractions/dri-enumerate>
|
|
|
|
# System files
|
|
|
|
/dev/dri/card[0-9]* rw, # beignet/libcl.so
|
|
@{sys}/devices/pci[0-9]*/**/{class,config,resource,revision} r, # libcl.so -> libdrm_intel.so -> libpciaccess.so (move to dri-enumerate ?)
|
|
/usr/lib/@{multiarch}/beignet/** r,
|
|
|
|
|
|
# Include additions to the abstraction
|
|
#include if exists <abstractions/opencl-intel.d>
|