Skip to content

nvidia_modprobe: allow reading driver parameters

Vincas Dargis requested to merge Talkless/apparmor:update-nvidia-modprobe into master

On Debian Sid nvidia_modprobe is not permissive enough:

type=AVC msg=audit(1598788812.837:495): apparmor="DENIED"
operation="open" profile="nvidia_modprobe"
name="/proc/driver/nvidia/params" pid=31586 comm="nvidia-modprobe"
requested_mask="r" denied_mask="r" fsuid=0 ouid=0

Update profile to all reading /proc/driver/nvidia/params

Fixes Debian bug 969267 [0]

[0] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=969267

Merge request reports