diff options
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/mesa')
| -rw-r--r-- | straper/db/public/apparmor/apparmor.d/abstractions/mesa | 37 |
1 files changed, 37 insertions, 0 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/mesa b/straper/db/public/apparmor/apparmor.d/abstractions/mesa new file mode 100644 index 0000000..c401a8e --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/abstractions/mesa @@ -0,0 +1,37 @@ +# vim:syntax=apparmor +# Rules for Mesa implementation of the OpenGL API + + abi <abi/4.0>, + + # System files + /dev/dri/ r, # libGLX_mesa.so calls drmGetDevice2() + + # Needed to check if the kernel supports the i915 perf interface + # (src/intel/perf/gen_perf.c, load_oa_metrics()) + @{PROC}/sys/dev/i915/perf_stream_paranoid r, + + @{sys}/devices/pci[0-9]*/**/{revision,config} r, + + # User files + owner @{HOME}/.cache/ w, # if user clears all caches + owner @{HOME}/.cache/mesa_shader_cache/ rw, + owner @{HOME}/.cache/mesa_shader_cache/index rw, + owner @{HOME}/.cache/mesa_shader_cache/[a-f0-9][a-f0-9]/ rw, + owner @{HOME}/.cache/mesa_shader_cache/[a-f0-9][a-f0-9]/[0-9a-f]* rw, + owner @{HOME}/.cache/mesa_shader_cache/[a-f0-9][a-f0-9]/[0-9a-f]*.tmp rwk, + + owner @{HOME}/.cache/mesa_shader_cache_db/ rw, + owner @{HOME}/.cache/mesa_shader_cache_db/index rwk, + owner @{HOME}/.cache/mesa_shader_cache_db/part*/ rw, + owner @{HOME}/.cache/mesa_shader_cache_db/part*/mesa_cache.db rwk, + owner @{HOME}/.cache/mesa_shader_cache_db/part*/mesa_cache.idx rwk, + + # Fallback location when @{HOME}/.cache is not available + owner /tmp/Temp-[a-f0-9]*/mesa_shader_cache/ rw, + owner /tmp/Temp-[a-f0-9]*/mesa_shader_cache/index rw, + owner /tmp/Temp-[a-f0-9]*/mesa_shader_cache/[a-f0-9][a-f0-9]/ rw, + owner /tmp/Temp-[a-f0-9]*/mesa_shader_cache/[a-f0-9][a-f0-9]/[0-9a-f]* rw, + owner /tmp/Temp-[a-f0-9]*/mesa_shader_cache/[a-f0-9][a-f0-9]/[0-9a-f]*.tmp rwk, + + # Include additions to the abstraction + include if exists <abstractions/mesa.d> |