FYI AppArmor abstraction for AMD proprietary driver

Malte Gell <[email protected]> Tue, 13 Sep 2016 10:12:13 +0200

Newsgroups	gmane.linux.suse.security
Message-ID	<[email protected]>

This is an abstraction for those folks who prefer to use the proprietary
AMD driver

It needs to be added to every profile for X11 apps.

It may be more convenient to copy the whole rule into abstractions/x to
avoid changing existing profiles. To be honest, this is, what I did when
I used fglrx.

amdfglrx.TXT (text/plain, 499 B)

# vim:syntax=apparmor
# abstractions/amdfglrx

# save as /etc/apparmor.d/abstractions/amdfglrx                 

  # permission for proprietary 
  # AMD Catalyst driver
  # you still need abstractions/X in your
  # profiles, this just complements
  # abstractions/X

  /proc/ati r,
  /proc/ati/** r,
  /dev/ati rw,
  /dev/video* rw,
  /dev/ati/* rw,
  /etc/ati r,
  /etc/ati/** r,
  /etc/ati/authatieventsd.sh Ux,
  /dev/shm/ rwkl,
  /dev/shm/* rwkl,
  /home/*/.AMD/ rwkl,
  /home/*/.AMD/** rwkl,