diff options
Diffstat (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/vulkan')
| -rw-r--r-- | straper/db/public/apparmor/apparmor.d/abstractions/vulkan | 26 |
1 files changed, 26 insertions, 0 deletions
diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/vulkan b/straper/db/public/apparmor/apparmor.d/abstractions/vulkan new file mode 100644 index 0000000..aede375 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/abstractions/vulkan @@ -0,0 +1,26 @@ +# vim:syntax=apparmor +# Vulkan access requirements + + abi <abi/4.0>, + + # System files + /dev/dri/ r, # libvulkan_radeon.so, libvulkan_intel.so (Mesa) + /etc/glvnd/egl_vendor.d/{,*.json} r, + /etc/vulkan/icd.d/{,*.json} r, + /etc/vulkan/{explicit,implicit}_layer.d/{,*.json} r, + # for drmGetMinorNameForFD() from libvulkan_intel.so (Mesa) + @{sys}/devices/pci[0-9]*/*/drm/ r, + @{sys}/devices/pci[0-9]*/*/drm/card[0-9]/gt_{max,min}_freq_mhz r, # anv_enumerate_physical_devices() from libvulkan_intel.so + @{sys}/devices/pci[0-9]*/*/drm/card[0-9]/metrics/ r, # anv_enumerate_physical_devices() from libvulkan_intel.so + @{sys}/devices/pci[0-9]*/*/drm/card[0-9]/metrics/????????-????-????-????-????????????/id r, # anv_enumerate_physical_devices() from libvulkan_intel.so + /usr/share/egl/egl_external_platform.d/{,*} r, + /usr/share/glvnd/egl_vendor.d/{,*} r, + /usr/share/vulkan/icd.d/{,*.json} r, + /usr/share/vulkan/{explicit,implicit}_layer.d/{,*.json} r, + + # User files + owner @{HOME}/.local/share/vulkan/implicit_layer.d/{,*.json} r, + + + # Include additions to the abstraction + include if exists <abstractions/vulkan.d> |