Re: [libvirt] [PATCH 1/2] security: aa-helper: nvidia rules for gl devices

2019-03-06 Thread Christian Ehrhardt
On Tue, Mar 5, 2019 at 5:45 PM Jamie Strandboge wrote: > > On Tue, 05 Mar 2019, Christian Ehrhardt wrote: > > > Further testing with different devices showed that we need more rules > > to drive gl backends with nvidia cards. Related denies look like: > > > > apparmor="DENIED" operation="open" > >

Re: [libvirt] [PATCH 1/2] security: aa-helper: nvidia rules for gl devices

2019-03-05 Thread Jamie Strandboge
On Tue, 05 Mar 2019, Christian Ehrhardt wrote: > Further testing with different devices showed that we need more rules > to drive gl backends with nvidia cards. Related denies look like: > > apparmor="DENIED" operation="open" > name="/usr/share/egl/egl_external_platform.d/" > requested_mask="

[libvirt] [PATCH 1/2] security: aa-helper: nvidia rules for gl devices

2019-03-05 Thread Christian Ehrhardt
Further testing with different devices showed that we need more rules to drive gl backends with nvidia cards. Related denies look like: apparmor="DENIED" operation="open" name="/usr/share/egl/egl_external_platform.d/" requested_mask="r" apparmor="DENIED" operation="open" name="/proc/modules"