mirror of
https://gitlab.com/apparmor/apparmor.git
synced 2025-03-06 17:31:01 +01:00

Local policy may want to extend or override abstractions, so add support for including local updates to them. Acked-by: Christian Boltz <apparmor@cboltz.de> Acked-by: intrigeri <intrigeri@boum.org> Signed-off-by: John Johansen <john.johansen@canonical.com>
20 lines
657 B
Text
20 lines
657 B
Text
# vim:syntax=apparmor
|
|
# OpenCL access requirements for Intel implementation
|
|
|
|
#include <abstractions/opencl-common>
|
|
|
|
# for libcl.so (libOpenCL.so -> beignet/libcl.so calls XOpenDisplay())
|
|
#include <abstractions/X>
|
|
|
|
# for libOpenCL.so -> beignet/libcl.so -> libpciaccess.so
|
|
#include <abstractions/dri-enumerate>
|
|
|
|
# System files
|
|
|
|
/dev/dri/card[0-9]* rw, # beignet/libcl.so
|
|
@{sys}/devices/pci[0-9]*/**/{class,config,resource,revision} r, # libcl.so -> libdrm_intel.so -> libpciaccess.so (move to dri-enumerate ?)
|
|
/usr/lib/@{multiarch}/beignet/** r,
|
|
|
|
|
|
# Include additions to the abstraction
|
|
#include if exists <abstractions/opencl-intel.d>
|