github.com/kubiko/snapd@v0.0.0-20201013125620-d4f3094d9ddf/interfaces/builtin/tpm.go (about) 1 // -*- Mode: Go; indent-tabs-mode: t -*- 2 3 /* 4 * Copyright (C) 2016-2017 Canonical Ltd 5 * 6 * This program is free software: you can redistribute it and/or modify 7 * it under the terms of the GNU General Public License version 3 as 8 * published by the Free Software Foundation. 9 * 10 * This program is distributed in the hope that it will be useful, 11 * but WITHOUT ANY WARRANTY; without even the implied warranty of 12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 * GNU General Public License for more details. 14 * 15 * You should have received a copy of the GNU General Public License 16 * along with this program. If not, see <http://www.gnu.org/licenses/>. 17 * 18 */ 19 20 package builtin 21 22 const tpmSummary = `allows access to the Trusted Platform Module device` 23 24 const tpmBaseDeclarationSlots = ` 25 tpm: 26 allow-installation: 27 slot-snap-type: 28 - core 29 deny-auto-connection: true 30 ` 31 32 const tpmConnectedPlugAppArmor = ` 33 # Description: for those who need to talk to the system TPM chip over 34 # /dev/tpm[0-9]* and kernel TPM resource manager /dev/tpmrm[0-0]* (4.12+) 35 36 /dev/tpm[0-9]* rw, 37 /dev/tpmrm[0-9]* rw, 38 ` 39 40 var tpmConnectedPlugUDev = []string{ 41 `KERNEL=="tpm[0-9]*"`, 42 `KERNEL=="tpmrm[0-9]*"`, 43 } 44 45 func init() { 46 registerIface(&commonInterface{ 47 name: "tpm", 48 summary: tpmSummary, 49 implicitOnCore: true, 50 implicitOnClassic: true, 51 baseDeclarationSlots: tpmBaseDeclarationSlots, 52 connectedPlugAppArmor: tpmConnectedPlugAppArmor, 53 connectedPlugUDev: tpmConnectedPlugUDev, 54 }) 55 }