snapd icon indicating copy to clipboard operation
snapd copied to clipboard

i/b/fwupd: add more permissions

Open valentindavid opened this issue 1 year ago • 3 comments

This is what is needed to run get-devices fwupd on an Intel NUC.

Note for review, this has been tested with fwupd/fwupd#5062

valentindavid avatar Sep 21 '22 14:09 valentindavid

Whole disks, the plugin flashes disk images.

DylanVanAssche avatar Sep 30 '22 11:09 DylanVanAssche

Before this is merged, there is one more new plugin about to be merged that needs two more things. May as well get it right in one shot.

This plugin requires read access to `/dev/bus/usb`, '/dev/video0'.
This plugin requires the `UVCIOC_CTRL_QUERY` ioctl interface.

superm1 avatar Nov 04 '22 13:11 superm1

Before this is merged, there is one more new plugin about to be merged that needs two more things. May as well get it right in one shot.

This plugin requires read access to `/dev/bus/usb`, '/dev/video0'.
This plugin requires the `UVCIOC_CTRL_QUERY` ioctl interface.

I have added read access to /dev/bus/usb/** and /dev/video[0-9]*. This should be enough. I did not find any capabilities blocking UVCIOC_CTRL_QUERY, so I suppose it should work.

valentindavid avatar Nov 14 '22 11:11 valentindavid

I have added few things to allow UEFI capsules to work.

valentindavid avatar Nov 21 '22 13:11 valentindavid

Setting security-high because of multiple requests to run fwupd on core

mvo5 avatar Dec 14 '22 08:12 mvo5