Specify device nodes instead of being too permissive.

2025-08-30 13:58:22 +00:00 · 2017-03-06 19:59:43 +01:00
parent fe421f6952
commit 71566d36e3
1 changed files with 3 additions and 1 deletions
--- a/profiles/apparmor.d/abstractions/nvidia
+++ b/profiles/apparmor.d/abstractions/nvidia
@@ -8,7 +8,9 @@
  /etc/vdpau_wrapper.cfg r,

  # device files
-  /dev/nvidia*    rw,
+  /dev/nvidiactl rw,
+  /dev/nvidia-modeset rw,
+  /dev/nvidia[0-9]* rw,

  @{PROC}/interrupts r,
  @{PROC}/sys/vm/max_map_count r,