OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	04/29/2025 04:07:52 PM	rwxr-xr-x
📁 abi	-	04/29/2025 04:07:52 PM	rwxr-xr-x
📁 abstractions	-	04/29/2025 04:07:52 PM	rwxr-xr-x
📁 disable	-	03/06/2024 06:40:00 PM	rwxr-xr-x
📁 force-complain	-	03/06/2024 06:40:00 PM	rwxr-xr-x
📁 local	-	04/29/2025 04:07:52 PM	rwxr-xr-x
📄 lsb_release	1.28 KB	03/06/2024 06:40:00 PM	rw-r--r--
📄 nvidia_modprobe	1.08 KB	03/06/2024 06:40:00 PM	rw-r--r--
📄 sbin.dhclient	3.42 KB	01/31/2023 10:09:08 PM	rw-r--r--
📁 tunables	-	04/29/2025 04:07:52 PM	rwxr-xr-x

Editing: nvidia_modprobe

# vim:syntax=apparmor

#include <tunables/global>

profile nvidia_modprobe {
  #include <abstractions/base>

# Capabilities

capability chown,
  capability mknod,
  capability setuid,
  capability sys_admin,

# Main executable

/usr/bin/nvidia-modprobe mr,

# Other executables

/usr/bin/kmod Cx -> kmod,

# System files

/dev/nvidia-uvm w,
  /dev/nvidia-uvm-tools w,
  @{sys}/bus/pci/devices/ r,
  @{sys}/devices/pci[0-9]*/**/config r,
  @{PROC}/devices r,
  @{PROC}/modules r,
  @{PROC}/sys/kernel/modprobe r,

# Child profiles

profile kmod {
    #include <abstractions/base>

# Capabilities

capability sys_module,

# Main executable

/usr/bin/kmod mrix,

# Other executables

/{,usr/}bin/{,ba,da}sh ix,

# System files

/etc/modprobe.d/{,*.conf} r,
    /etc/nvidia/current/*.conf r,
    @{sys}/module/ipmi_devintf/initstate r,
    @{sys}/module/ipmi_msghandler/initstate r,
    @{sys}/module/nvidia/initstate r,
    @{PROC}/cmdline r,
  }

# Site-specific additions and overrides. See local/README for details.
  #include <local/nvidia_modprobe>
}