interface: allows reading sd cards internal info from block-devices interface

Without this line:
	cat /sys/block/mmcblk0/device/date
results in this denial:
/sys/devices/platform/soc/3f202000.mmc/mmc_host/mmc0/mmc0:aaaa/dateSee: https://forum.snapcraft.io/t/interface-for-read-info-about-sd-card/25202

After adding the line in the commit to my snap apparmor file it works:

root@srly-r7d8mg4oj4eo0go:/home/pi# sudo apparmor_parser -r /var/lib/snapd/apparmor/profiles/snap.screenly-client.submit-report
Warning from /var/lib/snapd/apparmor/profiles/snap.screenly-client.submit-report (/var/lib/snapd/apparmor/profiles/snap.screenly-client.submit-report line 1297): Character # was quoted unnecessarily, dropped preceding quote ('') character
root@srly-r7d8mg4oj4eo0go:/home/pi# snap run --shell screenly-client.submit-report
root@srly-r7d8mg4oj4eo0go:/home/pi# cat /sys/block/mmcblk0/device/date
06/2017
This commit is contained in:
Sergey Borovkov
2021-07-07 13:34:29 +03:00
committed by GitHub
parent 782d380ac5
commit 9b844f8ae9
+1
View File
@@ -53,6 +53,7 @@ const blockDevicesConnectedPlugAppArmor = `
/run/udev/data/b[0-9]*:[0-9]* r,
/sys/block/ r,
/sys/devices/**/block/** r,
/sys/devices/platform/soc/**/mmc_host/** r,
# Access to raw devices, not individual partitions
/dev/hd[a-t] rw, # IDE, MFM, RLL