I think the way to solve this is for either apparmor or firefox to ship 
/etc/apparmor.d/abstractions/ubuntu-browsers.d/nvidia with the 3 needed entries:
  /dev/nvidactl rw,
  /dev/nvidia0 rw,
  /proc/interrupts r,

Then have the firefox.postinst.in have the following line when creating 
/etc/apparmor.d/abstractions/ubuntu-browsers.d/$APPNAME (this will have to be 
conditionally added if this include file is shipped in apparmor):
#include <abstractions/ubuntu-browsers.d/nvidia

This will make it so that new installs will get the nvidia abstraction,
but people can opt out of it using 'aa-update-browser'.

** Changed in: apparmor (Ubuntu)
     Assignee: (unassigned) => Micah Gersten (micahg)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/712584

Title:
  Firefox-4.0: AppArmor blocks access to nvidia devices

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/712584/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to