mir/apparmor
2
0
Fork 0
mirror of https://gitlab.com/apparmor/apparmor synced 2025-09-01 14:55:10 +00:00
Code Issues Releases Wiki Activity

Subject: nvidia abstractions cleanups

Browse Source 
Merge from trunk commit 2090

Original message:
  Subject: profiles - nvidia abstraction cleanups
  
  This patch modifies the nvidia abstraction to add the livdpau wrapper
  config file for nvidia workarounds. It also converts the /proc/
  rules to use the @{PROC} tunable. And finally, it converts the
  ubuntu-browsers.d/multimedia abstraction to use the nvidia abstraction.
  
  Signed-off-by: Steve Beattie <sbeattie@ubuntu.com>
  Acked-By: Jamie Strandboge <jamie@canonical.com>

Nominated-by: Christian Boltz <apparmor@cboltz.de>
Acked-by: Steve Beattie <sbeattie@ubuntu.com>
This commit is contained in:
Steve Beattie
2013-01-04 09:34:43 -08:00
parent 0a97828f30
commit fc6889ae8e
2 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
profiles/apparmor.d/abstractions/nvidia
View File

@@ -4,9 +4,12 @@
# configuration queries # configuration queries
capability ipc_lock, capability ipc_lock,
# libvdpau config file for nvidia workarounds
/etc/vdpau_wrapper.cfg r,
# device files # device files
/dev/nvidia0 rw, /dev/nvidia0 rw,
/dev/nvidiactl rw, /dev/nvidiactl rw,
/proc/interrupts r, @{PROC}/interrupts r,
/proc/sys/vm/max_map_count r, @{PROC}/sys/vm/max_map_count r,

6
profiles/apparmor.d/abstractions/ubuntu-browsers.d/multimedia
View File

@@ -50,10 +50,8 @@
/opt/google/talkplugin/GoogleTalkPlugin ixr, /opt/google/talkplugin/GoogleTalkPlugin ixr,
owner @{HOME}/.config/google-googletalkplugin/** rw, owner @{HOME}/.config/google-googletalkplugin/** rw,
# If we allow the above, nvidia based systems will also need these # If we allow the above, nvidia based systems will also need this
/dev/nvidactl rw, #include <abstractions/nvidia>
/dev/nvidia0 rw,
@{PROC}/interrupts r,
# Virus scanners # Virus scanners
/usr/bin/clamscan Cx -> sanitized_helper, /usr/bin/clamscan Cx -> sanitized_helper,