interfaces/builtin/fwupd.go: allow access to nvmem for thunderbolt pl…

…ugin Upstream issue: fwupd/fwupd#8014
canonical · Nov 18, 2024 · 8533329 · 8533329
1 parent e899805
commit 8533329
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/interfaces/builtin/fwupd.go b/interfaces/builtin/fwupd.go
@@ -154,6 +154,10 @@ const fwupdPermanentSlotAppArmor = `
   /sys/devices/**/psp_vbflash rw,
   /sys/devices/**/psp_vbflash_status r,
 
+  # Required by plugin thunderbolt
+  /sys/devices/**/nvm_non_active*/nvmem a,
+  /sys/devices/**/nvm_active*/nvmem r,
+
   # DBus accesses
   #include <abstractions/dbus-strict>
   dbus (send)