# apparmor.d - Full set of apparmor profiles
# Copyright (C) 2025 Alexandre Pujol <alexandre@pujol.io>
# SPDX-License-Identifier: GPL-2.0-only
# LOGPROF-SUGGEST: no

  abi <abi/4.0>,

  include <abstractions/gpu>
  include <abstractions/hwmon>
  include <abstractions/sys/amdgpu>
  include <abstractions/sys/dmi>

  unix (bind listen) type=seqpacket addr=@@{hex}@{hex},

  # The orcexec.* file is JIT compiled code for various GStreamer elements.
  owner @{run}/user/@{uid}/orcexec.@{rand6} mrw,

  @{sys}/bus/ r,
  @{sys}/devices/@{pci_bus}/uevent r,

  @{PROC}/devices r,
  @{PROC}/driver/nvidia/capabilities/mig/config r,
  @{PROC}/sys/vm/nr_hugepages r,

  # Video Acceleration API
  @{att}/dev/dri/renderD128 rw,
  @{att}/dev/dri/renderD129 rw,

  /dev/ r,
  /dev/nvidia-caps/ rw,
  /dev/nvidia-caps/nvidia-cap@{int} rw,

  include if exists <abstractions/flatpak/devices/dri.d>

# vim:syntax=apparmor
