mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 09:21:00 +01:00
9fc8e43c67
This matches what we use in the profiles for local abstractions. Also adjust the check in the Makefile to expect the variant without '#'.
23 lines
675 B
Text
23 lines
675 B
Text
# vim:syntax=apparmor
|
|
|
|
abi <abi/3.0>,
|
|
|
|
# OpenCL access requirements for Intel implementation
|
|
|
|
#include <abstractions/opencl-common>
|
|
|
|
# for libcl.so (libOpenCL.so -> beignet/libcl.so calls XOpenDisplay())
|
|
#include <abstractions/X>
|
|
|
|
# for libOpenCL.so -> beignet/libcl.so -> libpciaccess.so
|
|
#include <abstractions/dri-enumerate>
|
|
|
|
# System files
|
|
|
|
/dev/dri/card[0-9]* rw, # beignet/libcl.so
|
|
@{sys}/devices/pci[0-9]*/**/{class,config,resource,revision} r, # libcl.so -> libdrm_intel.so -> libpciaccess.so (move to dri-enumerate ?)
|
|
/usr/lib/@{multiarch}/beignet/** r,
|
|
|
|
|
|
# Include additions to the abstraction
|
|
include if exists <abstractions/opencl-intel.d>
|