Merge lp:~ahayzen/music-app/remix-confinement-back-002 into lp:music-app/remix

[Andrew Hayzen]

* Add back confinement

* Add back confinement

Please test thoroughly, especially content-hub, url-dispatcher, thumbnailer.

[Andrew Hayzen (ahayzen)]

Note we were waiting for bug 1381102 to land, it has in utopic not so sure about rtm.

[Ubuntu Phone Apps Jenkins Bot (ubuntu-phone-apps-jenkins-bot)]

PASSED: Continuous integration, rev:672
http://91.189.93.70:8080/job/music-app-remix-ci/105/
Executed test runs:
    SUCCESS: http://91.189.93.70:8080/job/generic-mediumtests-utopic-python3/1015
        deb: http://91.189.93.70:8080/job/generic-mediumtests-utopic-python3/1015/artifact/work/output/*zip*/output.zip
    SUCCESS: http://91.189.93.70:8080/job/music-app-remix-utopic-amd64-ci/105

Click here to trigger a rebuild:
http://91.189.93.70:8080/job/music-app-remix-ci/105/rebuild

review: Approve (continuous-integration)

[Andrew Hayzen (ahayzen)]

Tested in rtm, only the following denials appear.

Oct 20 04:41:08 ubuntu-phablet kernel: [17638.562210] type=1400 audit(1413776468.504:177): apparmor="DENIED" operation="open" profile="com.ubuntu.music_music_1.3.672" name="/home/phablet/.cache/QML/Apps/" pid=28161 comm="qmlscene" requested_mask="r" denied_mask="r" fsuid=32011 ouid=32011
Oct 20 04:41:11 ubuntu-phablet dbus[1586]: apparmor="DENIED" operation="dbus_bind" bus="session" name="org.freedesktop.Application" mask="bind" pid=28161 profile="com.ubuntu.music_music_1.3.672"

$ system-image-cli -i
current build number: 99
device name: mako
channel: ubuntu-touch/ubuntu-rtm/devel-proposed
alias: ubuntu-touch/ubuntu-rtm/14.09-proposed
last update: 2014-10-19 07:24:09
version version: 99
version ubuntu: 20141019
version device: 20141017.2
version custom: mako-1.1

[Victor Thompson (vthompson)]

Jdstrand has stated that a bug exists for the error we are seeing (lp:1381620) and that it is essentially noise.

Looks great! We are now mere mortals again--sort of.

review: Approve

=== modified file 'click/apparmor.json'
--- click/apparmor.json	2014-07-01 23:13:50 +0000
+++ click/apparmor.json	2014-10-17 00:18:21 +0000
@@ -1,7 +1,17 @@
 {
     "policy_version": 1.2,
-    "template": "unconfined",
     "policy_groups": [
-        "content_exchange"
+        "audio",
+        "content_exchange",
+        "music_files_read",
+        "networking",
+        "usermetrics"
+    ],
+    "read_path": [
+        "@{HOME}/.cache/media-art/",
+        "@{HOME}/.cache/mediascanner-2.0/"
+    ],
+    "write_path": [
+        "@{HOME}/Music/Imported/"
     ]
 }