The detection with virt-aa-helper was fixed by the /dev/dri read to virt-aa-helper and I got this rule: "/dev/dri/renderD128" rw,
Yet as we learned above, we need way more. I need to discuss: - which ones we want to add statically - which ones we want to add after gl is detected - what pathing I could use to determine the /sys/devices/... paths at runtime or if we find a safe wildcard pattern (it is read only after all) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1815452 Title: more apparmor denials for opengl usage To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/1815452/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
