snapd
snapd copied to clipboard
i/b/fwupd: add more permissions
This is what is needed to run get-devices
fwupd on an Intel NUC.
Note for review, this has been tested with fwupd/fwupd#5062
Whole disks, the plugin flashes disk images.
Before this is merged, there is one more new plugin about to be merged that needs two more things. May as well get it right in one shot.
This plugin requires read access to `/dev/bus/usb`, '/dev/video0'.
This plugin requires the `UVCIOC_CTRL_QUERY` ioctl interface.
Before this is merged, there is one more new plugin about to be merged that needs two more things. May as well get it right in one shot.
This plugin requires read access to `/dev/bus/usb`, '/dev/video0'. This plugin requires the `UVCIOC_CTRL_QUERY` ioctl interface.
I have added read access to /dev/bus/usb/**
and /dev/video[0-9]*
. This should be enough. I did not find any capabilities blocking UVCIOC_CTRL_QUERY
, so I suppose it should work.
I have added few things to allow UEFI capsules to work.
Setting security-high because of multiple requests to run fwupd on core