Files
snapd/interfaces/builtin/framebuffer.go
Zygmunt Krynicki 0e1ebd729c interfaces: remove reservedForOS from commonInterface
This is a leftover from old sanitization / validation code. Nothing is
using this variable anymore.

Signed-off-by: Zygmunt Krynicki <me@zygoon.pl>
2019-11-27 07:36:17 +01:00

53 lines
1.6 KiB
Go

// -*- Mode: Go; indent-tabs-mode: t -*-
/*
* Copyright (C) 2016-2017 Canonical Ltd
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License version 3 as
* published by the Free Software Foundation.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <http://www.gnu.org/licenses/>.
*
*/
package builtin
const framebufferSummary = `allows access to universal framebuffer devices`
const framebufferBaseDeclarationSlots = `
framebuffer:
allow-installation:
slot-snap-type:
- core
deny-auto-connection: true
`
const framebufferConnectedPlugAppArmor = `
# Description: Allow reading and writing to the universal framebuffer (/dev/fb*) which
# gives privileged access to the console framebuffer.
/dev/fb[0-9]* rw,
/run/udev/data/c29:[0-9]* r,
`
var framebufferConnectedPlugUDev = []string{`KERNEL=="fb[0-9]*"`}
func init() {
registerIface(&commonInterface{
name: "framebuffer",
summary: framebufferSummary,
implicitOnCore: true,
implicitOnClassic: true,
baseDeclarationSlots: framebufferBaseDeclarationSlots,
connectedPlugAppArmor: framebufferConnectedPlugAppArmor,
connectedPlugUDev: framebufferConnectedPlugUDev,
})
}