Super-privileged interfaces¶
Interfaces allow (or deny) access to a resource outside of a snap’s confinement and, generally, any snap can declare any supported interface.
However, there is a limited set of interfaces that require extra scrutiny when their plugs are included in a snap. This is due to their permissive nature and the control and impact they potentially have over a system.
These interfaces are called super-privileged, and snaps that include plugs for super-privileged interfaces require specific approval from the Store before they can be distributed and installed.
Super-privileged interfaces¶
Interface |
Description |
Categories |
Auto-connect |
|---|---|---|---|
permits snaps to operate as auditd service |
no |
||
access to disk block devices |
Super privileged, Storage, Low level |
no |
|
enable resource access to classic snap |
Super privileged, Ubuntu Core |
no |
|
permits access to a specific class of device |
Super privileged, Ubuntu Core |
no |
|
identify and launch desktop apps from other snaps |
Super privileged, Desktop |
no |
|
access encrypted storage devices |
Super privileged, Ubuntu Core, Storage |
no |
|
start, stop, or manage Docker containers |
Super privileged, Containers |
no |
|
allows operating as the Docker daemon |
Super privileged, Containers |
no |
|
allows to export/unexport and control all GPIOs |
Super privileged, GPIO |
no |
|
allows operating as the Greengrass service |
Super privileged, Edge, AWS, Discrete |
no |
|
access Android’s ION memory allocator |
no |
||
permits a custom kernel firmware search path |
no |
||
insert, remove and query kernel modules |
Super privileged, System, Kernel |
no |
|
load, or deny loading, specific kernel modules |
Super privileged, System, Kernel |
no |
|
use functions essential for Kubernetes |
Super privileged, Hypervisor, Discrete |
no |
|
provides access to the LXD socket |
Super privileged, Container, Discrete |
no |
|
allows operating as the LXD service |
Super privileged, Container, Discrete |
no |
|
permits access to the MicroCeph socket, which is used internally by the microceph snap |
Super privileged, Container |
no |
|
permits the microceph snap to operate as the MicroCeph service |
Super privileged, Container |
no |
|
used only by the MicroOVN snap for socket access |
no |
||
multiple service access to the Microstack infrastructure |
Super privileged, Container, Discrete |
no |
|
mount and unmount transient and persistent filesystem mount points |
Super privileged, Storage |
no |
|
multipass-support allows operating as the Multipass service |
Super privileged, VM, Discrete |
no |
|
internally used NVIDIA access |
Super privileged, Ubuntu Core |
no |
|
control the PackageKit service |
Super privileged, Packaging |
no |
|
read or write files in the user’s home directory |
Super privileged, Personal data, Attributes |
no |
|
enables the cryptographic token interface standard to be used |
no |
||
access to the polkit authorisation manager |
no |
||
permits applications to register as polkit agents |
no |
||
enables inter-process communication (IPC) messages |
Super privileged, IPC |
no by default, yes with snaps from the same publisher |
|
interact with the kernel’s Remote Processor Framework |
no |
||
read and write access to SCSI Generic driver devices |
Storage, Super privileged |
no |
|
control SD cards on specific devices |
Super privileged, Storage |
no |
|
enables two snaps to access the same shared memory |
Super privileged, IPC |
no |
|
permits bespoke snap refresh control |
Super privileged, Packaging |
no |
|
enables the tracking of snap refreshes |
Super privileged, Packaging |
no |
|
install or remove software |
Super privileged, Packaging |
no |
|
allows the Steam snap to access pressure-vessel containers |
Super privileged, Discrete |
no |
|
restart or power off the device |
Super privileged, System, Power |
no |
|
read or write files in the system |
Super privileged, Storage, Attributes |
no |
|
permits access to the Trusted Execution Environment |
Super privileged, Security, Ubuntu Core |
no |
|
allows write access to /dev/uinput |
Super privileged, Hardware |
no |
|
share data with other Unity 8 apps |
Display, Super privileged |
yes |
|
permits a snap to create a new namespace |
no |
||
allows access to Xilinx DMA IP from a connected PCIe card |
Ubuntu Core, Super privileged |
no |