From 39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2 Mon Sep 17 00:00:00 2001 From: Lukasz Kasprzak Date: Fri, 20 Mar 2026 19:16:32 +0100 Subject: feat: first fully successful run e2e on straper --- .../db/public/apparmor/apparmor.d/abstractions/video | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 straper/db/public/apparmor/apparmor.d/abstractions/video (limited to 'straper/db/public/apparmor/apparmor.d/abstractions/video') diff --git a/straper/db/public/apparmor/apparmor.d/abstractions/video b/straper/db/public/apparmor/apparmor.d/abstractions/video new file mode 100644 index 0000000..0495388 --- /dev/null +++ b/straper/db/public/apparmor/apparmor.d/abstractions/video @@ -0,0 +1,20 @@ +# vim:syntax=apparmor +# video device access + + abi , + + # System devices + @{sys}/class/video4linux/ r, + @{sys}/class/video4linux/** r, + + owner /dev/shm/libv4l-* rw, + /dev/video[0-9]* rw, + @{sys}/devices/pci[0-9]*/**/usb[0-9]/**/video4linux/video[0-9]*/dev r, + @{sys}/devices/pci[0-9]*/**/usb[0-9]/**/{modalias,speed} r, + + @{sys}/devices/virtual/dmi/id/sys_vendor r, + @{sys}/devices/virtual/dmi/id/product_{name,version} r, + @{sys}/devices/virtual/dmi/id/board_{vendor,name,version} r, + + # Include additions to the abstraction + include if exists -- cgit v1.3