interfaces/default: allow owner read on @{PROC}/@{pid}/fdinfo/* (#15007)

This is used by newer Mesa for GPU accounting.
canonical · Feb 4, 2025 · 365a0c0 · 365a0c0
1 parent 4fd3221
commit 365a0c0
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/interfaces/apparmor/template.go b/interfaces/apparmor/template.go
@@ -266,6 +266,7 @@ var templateCommon = `
   owner @{PROC}/@{pid}/cgroup rk,
   @{PROC}/@{pid}/cpuset r,
   @{PROC}/@{pid}/io r,
+  owner @{PROC}/@{pid}/fdinfo/* r,
   owner @{PROC}/@{pid}/limits r,
   owner @{PROC}/@{pid}/loginuid r,
   owner @{PROC}/@{pid}/sessionid r,