%PDF- <> %âãÏÓ endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/Annots[ 28 0 R 29 0 R] /MediaBox[ 0 0 595.5 842.25] /Contents 4 0 R/Group<>/Tabs/S>> endobj ºaâÚÎΞ-ÌE1ÍØÄ÷{òò2ÿ ÛÖ^ÔÀá TÎ{¦?§®¥kuµùÕ5sLOšuY>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<>endobj 2 0 obj<> endobj 2 0 obj<>endobj 2 0 obj<>es 3 0 R>> endobj 2 0 obj<> ox[ 0.000000 0.000000 609.600000 935.600000]/Fi endobj 3 0 obj<> endobj 7 1 obj<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI]>>/Subtype/Form>> stream
# vim:syntax=apparmor abi <abi/3.0>, include <tunables/global> profile nvidia_modprobe { include <abstractions/base> # Capabilities capability chown, capability mknod, capability setuid, capability sys_admin, # Main executable /usr/bin/nvidia-modprobe mr, # Other executables /usr/bin/kmod Cx -> kmod, # System files /dev/nvidia-modeset w, /dev/nvidia-uvm w, /dev/nvidia-uvm-tools w, @{sys}/bus/pci/devices/ r, @{sys}/devices/pci[0-9]*/**/config r, @{PROC}/devices r, @{PROC}/driver/nvidia/params r, @{PROC}/modules r, @{PROC}/sys/kernel/modprobe r, # Child profiles profile kmod { include <abstractions/base> # Capabilities capability sys_module, # Main executable /usr/bin/kmod mrix, # Other executables /{,usr/}bin/{,ba,da}sh ix, # System files /etc/modprobe.d/{,*.conf} r, /etc/nvidia/current/*.conf r, @{sys}/module/ipmi_devintf/initstate r, @{sys}/module/ipmi_msghandler/initstate r, @{sys}/module/nvidia/initstate r, @{PROC}/cmdline r, } # Site-specific additions and overrides. See local/README for details. include if exists <local/nvidia_modprobe> }