snap: allow fwupdmgr to shutdown

[valentindavid]

When installing a capsule, optional reboot is done by fwupdmgr instead of fwupd. This means fwupdmgr needs the permission to do that.

Type of pull request:

• New plugin (Please include new plugin checklist)
• Code fix
• Feature
• Documentation

[hughsie]

It sometimes also needs reboot instead, is that the same permission?

[valentindavid]

shutdown interface includes reboot. Here is the AppArmor profile for it.

dbus (send)
    bus=system
    path=/org/freedesktop/systemd1
    interface=org.freedesktop.systemd1.Manager
    member={Reboot,PowerOff,Halt}
    peer=(label=unconfined),

dbus (send)
    bus=system
    path=/org/freedesktop/login1
    interface=org.freedesktop.login1.Manager
    member={PowerOff,Reboot,Suspend,Hibernate,HybridSleep,CanPowerOff,CanReboot,CanSuspend,CanHibernate,CanHybridSleep,ScheduleShutdown,CancelScheduledShutdown,SetWallMessage}
    peer=(label=unconfined),