mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 17:31:01 +01:00
2d8d2f06d5
Commit b5be596460 added ability to read
/usr/share/drirc.d/ directory to mesa abstraction.
This seems to be a mistake, as it was noted that not all GUI
applications, that need access to drirc.d, also need whole mesa-related
rules (including writing caches).
Move /usr/share/drirc.d/ access to different abstraction. This is not a
breaking change, because any GUI application will have included X
abstraction already, and in the end result - dri-common abstraction too.
16 lines
496 B
Text
16 lines
496 B
Text
# vim:syntax=apparmor
|
|
# Rules for Mesa implementation of the OpenGL API
|
|
|
|
# System files
|
|
/dev/dri/ r, # libGLX_mesa.so calls drmGetDevice2()
|
|
|
|
# User files
|
|
owner @{HOME}/.cache/ w, # if user clears all caches
|
|
owner @{HOME}/.cache/mesa_shader_cache/ w,
|
|
owner @{HOME}/.cache/mesa_shader_cache/index rw,
|
|
owner @{HOME}/.cache/mesa_shader_cache/??/ w,
|
|
owner @{HOME}/.cache/mesa_shader_cache/??/* rwk,
|
|
|
|
|
|
# Include additions to the abstraction
|
|
#include if exists <abstractions/mesa.d>
|