Skip to content

vulkan: allow reading /etc/vulkan/icd.d/

Vincas Dargis requested to merge Talkless/apparmor:update-vulkan into master

Recent Vulkan upgrades introduces new denies:

type=AVC msg=audit(1549749243.284:4250): apparmor="DENIED"
operation="open" profile="/usr/bin/vkcube" name="/etc/vulkan/icd.d/"
pid=16472 comm="vkcube" requested_mask="r" denied_mask="r" fsuid=1000
ouid=0
type=AVC msg=audit(1549800398.470:2612): apparmor="DENIED"
operation="open" profile="/usr/bin/vkcube"
name="/etc/vulkan/icd.d/test.j
son" pid=12230 comm="vkcube" requested_mask="r" denied_mask="r"
fsuid=1000 ouid=0

Update vulkan abstraction to allow reading new configuration directory.

Merge request reports