mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-01 06:45:38 +00:00
Code Issues Releases Wiki Activity

abstractions/opencl-nvidia: don't allow PUx on nvidia-modprobe

Browse Source
This commit is contained in:
Jamie Strandboge
2018-09-27 11:38:51 -05:00
parent ae771b475a
commit 8f9bd5b0e3
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
profiles/apparmor.d/abstractions/opencl-nvidia
View File

@@ -6,7 +6,13 @@
# Executables
/usr/bin/nvidia-modprobe PUx,
# https://github.com/NVIDIA/nvidia-modprobe
# This setuid executable is used to create various device files and load the
# the nvidia kernel module and is therefore not appropriate for a general
# purpose abstraction. Confined applications currently need to add this rule
# in their policy. At some point, a profile may be provided for this command
# such that Px would succeed.
#/usr/bin/nvidia-modprobe Pix,
# System files