mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 17:31:01 +01:00
2438179b76
Commit aa06528790 made @{sys} tunable
available by default.
Update profiles and abstractions to actually use @{sys} tunable for
better confinement in the future (when @{sys} becomes kernel var).
Closes LP#1728551
8 lines
281 B
Text
8 lines
281 B
Text
# vim:syntax=apparmor
|
|
|
|
# This file contains common DRI-specific rules useful for GUI applications that
|
|
# needs to enumerate graphic devices (as with drmParsePciDeviceInfo() from
|
|
# libdrm).
|
|
|
|
@{sys}/devices/pci[0-9]*/**/{device,subsystem_device,subsystem_vendor,uevent,vendor} r,
|
|
|