github.com/kubiko/snapd@v0.0.0-20201013125620-d4f3094d9ddf/interfaces/builtin/openvswitch.go (about) 1 // -*- Mode: Go; indent-tabs-mode: t -*- 2 3 /* 4 * Copyright (C) 2016 Canonical Ltd 5 * 6 * This program is free software: you can redistribute it and/or modify 7 * it under the terms of the GNU General Public License version 3 as 8 * published by the Free Software Foundation. 9 * 10 * This program is distributed in the hope that it will be useful, 11 * but WITHOUT ANY WARRANTY; without even the implied warranty of 12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 * GNU General Public License for more details. 14 * 15 * You should have received a copy of the GNU General Public License 16 * along with this program. If not, see <http://www.gnu.org/licenses/>. 17 * 18 */ 19 20 package builtin 21 22 const openvswitchSummary = `allows access to openvswitch management sockets` 23 24 const openvswitchBaseDeclarationSlots = ` 25 openvswitch: 26 allow-installation: 27 slot-snap-type: 28 - core 29 deny-auto-connection: true 30 ` 31 32 // List of sockets we want to allow access to. This list currently includes 33 // sockets needed by ovs-vsctl, ovs-ofctl and ovs-appctl commands. ovs-ofctl 34 // requires access to per-bridge sockets e.g. for bridge br-data you would need 35 // access to /run/openvswitch/br-data.mgmt. 36 const openvswitchConnectedPlugAppArmor = ` 37 /run/openvswitch/db.sock rw, 38 /run/openvswitch/*.mgmt rw, 39 # ovs-appctl allows sending commands to Open vSwitch daemons at runtime 40 /run/openvswitch/ovs-vswitchd.*.ctl rw, 41 /run/openvswitch/ovs-vswitchd.pid rw, 42 ` 43 44 func init() { 45 registerIface(&commonInterface{ 46 name: "openvswitch", 47 summary: openvswitchSummary, 48 implicitOnClassic: true, 49 baseDeclarationSlots: openvswitchBaseDeclarationSlots, 50 connectedPlugAppArmor: openvswitchConnectedPlugAppArmor, 51 }) 52 }