diff options
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/opencl-nvidia')
| -rw-r--r-- | straper/db/public/apparmor/apparmor.d/abstractions/opencl-nvidia | 36 |
1 files changed, 36 insertions, 0 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/opencl-nvidia b/straper/db/public/apparmor/apparmor.d/abstractions/opencl-nvidia new file mode 100644 index 0000000..5ad69b3 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/abstractions/opencl-nvidia @@ -0,0 +1,36 @@ +# vim:syntax=apparmor + + abi <abi/4.0>, + +# OpenCL access requirements for NVIDIA implementation + + include <abstractions/nvidia> + include <abstractions/opencl-common> + + # Executables + + # https://github.com/NVIDIA/nvidia-modprobe + # This setuid executable is used to create various device files and load the + # the nvidia kernel module. + /usr/bin/nvidia-modprobe Px -> nvidia_modprobe, + + # System files + + # libnvidia-opencl.so rules: + /dev/nvidia-uvm rw, + /dev/nvidia-uvm-tools rw, + @{sys}/devices/pci[0-9]*/**/config r, + @{sys}/devices/system/memory/block_size_bytes r, + /usr/share/nvidia/** r, + @{PROC}/devices r, + @{PROC}/sys/vm/mmap_min_addr r, + + # User files + + owner @{HOME}/.nv/ComputeCache/ w, + owner @{HOME}/.nv/ComputeCache/** rw, + owner @{HOME}/.nv/ComputeCache/index rwk, + + + # Include additions to the abstraction + include if exists <abstractions/opencl-nvidia.d> |