mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-01 14:55:10 +00:00
Code Issues Releases Wiki Activity

Merge branch 'refactor-and-update-dri' into 'master'

Browse Source 
Refactor and update dri-specific rules

See merge request apparmor/apparmor!66

Acked-by: Jamie Strandboge <jamie.strandboge@canonical.com>
This commit is contained in:
John Johansen
2018-02-08 08:35:56 +00:00
parent 547708bc99 b0456adbd8
commit ad5e988efb
3 changed files with 22 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
profiles/apparmor.d/abstractions/X
View File

@@ -10,6 +10,7 @@
# #
# ------------------------------------------------------------------ # ------------------------------------------------------------------
#include <abstractions/dri-common>
# .ICEauthority files required for X authentication, per user # .ICEauthority files required for X authentication, per user
@@ -45,14 +46,6 @@
# EGL # EGL
/usr/lib/@{multiarch}/egl/*.so* mr, /usr/lib/@{multiarch}/egl/*.so* mr,
# DRI
/usr/lib{,32,64}/dri/** mr,
/usr/lib/@{multiarch}/dri/** mr,
/usr/lib/fglrx/dri/** mr,
/dev/dri/** rw,
/etc/drirc r,
owner @{HOME}/.drirc r,
# Xcompose # Xcompose
owner @{HOME}/.XCompose r, owner @{HOME}/.XCompose r,

12
profiles/apparmor.d/abstractions/dri-common Normal file
View File

@@ -0,0 +1,12 @@
# vim:syntax=apparmor
# This file contains common DRI-specific rules useful for GUI applications
# (needed by libdrm and similar).
/usr/lib{,32,64}/dri/** mr,
/usr/lib/@{multiarch}/dri/** mr,
/usr/lib/fglrx/dri/** mr,
/dev/dri/** rw,
/etc/drirc r,
owner @{HOME}/.drirc r,

9
profiles/apparmor.d/abstractions/dri-enumerate Normal file
View File

@@ -0,0 +1,9 @@
# vim:syntax=apparmor
# This file contains common DRI-specific rules useful for GUI applications that
# needs to enumerate graphic devices (as with drmParsePciDeviceInfo() from
# libdrm).
# TODO: use @{sys} after it's moved into tunables/kernelvars (LP: #1728551)
/sys/devices/pci[0-9]*/**/{device,subsystem_device,subsystem_vendor,uevent,vendor} r,