github.com/rigado/snapd@v2.42.5-go-mod+incompatible/interfaces/builtin/physical_memory_control.go (about) 1 // -*- Mode: Go; indent-tabs-mode: t -*- 2 3 /* 4 * Copyright (C) 2016-2017 Canonical Ltd 5 * 6 * This program is free software: you can redistribute it and/or modify 7 * it under the terms of the GNU General Public License version 3 as 8 * published by the Free Software Foundation. 9 * 10 * This program is distributed in the hope that it will be useful, 11 * but WITHOUT ANY WARRANTY; without even the implied warranty of 12 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 13 * GNU General Public License for more details. 14 * 15 * You should have received a copy of the GNU General Public License 16 * along with this program. If not, see <http://www.gnu.org/licenses/>. 17 * 18 */ 19 20 package builtin 21 22 const physicalMemoryControlSummary = `allows write access to all physical memory` 23 24 const physicalMemoryControlBaseDeclarationSlots = ` 25 physical-memory-control: 26 allow-installation: 27 slot-snap-type: 28 - core 29 deny-auto-connection: true 30 ` 31 32 const physicalMemoryControlConnectedPlugAppArmor = ` 33 # Description: With kernels with STRICT_DEVMEM=n, write access to all physical 34 # memory. 35 # 36 # With STRICT_DEVMEM=y, allow writing to /dev/mem to access 37 # architecture-specific subset of the physical address (eg, PCI space, 38 # BIOS code and data regions on x86, etc) for all common uses of /dev/mem 39 # (eg, X without KMS, dosemu, etc). 40 capability sys_rawio, 41 /dev/mem rw, 42 ` 43 44 var physicalMemoryControlConnectedPlugUDev = []string{`KERNEL=="mem"`} 45 46 func init() { 47 registerIface(&commonInterface{ 48 name: "physical-memory-control", 49 summary: physicalMemoryControlSummary, 50 implicitOnCore: true, 51 implicitOnClassic: true, 52 baseDeclarationSlots: physicalMemoryControlBaseDeclarationSlots, 53 connectedPlugAppArmor: physicalMemoryControlConnectedPlugAppArmor, 54 connectedPlugUDev: physicalMemoryControlConnectedPlugUDev, 55 reservedForOS: true, 56 }) 57 }