~alfonsosanchezbeato/+git/snapd:shim-fix-2.59

Last commit made on 2023-04-26
Get this branch:
git clone -b shim-fix-2.59 https://git.launchpad.net/~alfonsosanchezbeato/+git/snapd
Only Alfonso Sanchez-Beato can upload to this branch. If you are Alfonso Sanchez-Beato please log in for upload directions.

Branch merges

Branch information

Name:
shim-fix-2.59
Repository:
lp:~alfonsosanchezbeato/+git/snapd

Recent commits

4893ac5... by Alfonso Sanchez-Beato

boot: make sure to update assets for system-seed-null role

5118a3f... by Alfonso Sanchez-Beato

go.mod: use shim sbat workaround branch

0a66c2f... by Michael Vogt

data: fix snapd.aa-prompt-ui.service to actually get started (#12693)

* data: fix snapd.aa-prompt-ui.service to actually get started

The current snapd.aa-prompt-ui.service user service is dbus activated.
However this does not work with the latest prompt design.

* packaing: add snapd.aa-prompt-ui.service to auto-start

577003b... by Michael Vogt

release: 2.59.1

1e0f04f... by ZoopOTheGoop <email address hidden>

steam-support: add udev rules from steam-devices (#12657)

* Add steam-devices udev rules to steam-support

* Make udev changes easier to add

* Add Udev spec test for steam-support

* run-checks: ignore mispell of "becuase"

* run-checks: fix misspelled misspell (the irony)

---------

Co-authored-by: Michael Vogt <email address hidden>

065b321... by Alex Murray

snap: tighten up layout path checking for usrmerge'd systems

On a usrmerge'd system, /lib is a symlink to /usr/lib and /var/run is a symlink
to /run - ensure these are also tested for when validating a snap layout.

Signed-off-by: Alex Murray <email address hidden>

26a9e77... by Samuele Pedroni

image,seed/seedwriter: fix corner cases of asserts fetching not triggered

with not extended classic models never seeing a system snap or seeing
snapd would not trigger assertion fetching

2335cb2... by Valentin David

i/b/dm_crypt: add missing permissions

Give lock permission to /dev/dm-*. Also allow to create
/run/cryptsetup.

6ee7070... by Ernest Lotter

interfaces/builtin: allow mount-control functionfs specific options (#12651)

* interfaces/builtin: allow functionfs specific options

* interfaces/builtin: review improvements

* interfaces/builtin: review improvement - extend optionsWithoutFsType for type functionfs

* interfaces/builtin: review improvement - add functionfs bind validation test

6fd8460... by Sergio Costas

apparmor: allow to read /proc/self/map_files (#12547)

* apparmor: allow to read /proc/self/map_files

Accesing this folder is needed for mangohud. Since the info
there is basically the same than in /proc/self/maps, but it's
easier to access because the program doesn't have to parse it,
it should be safe.

* Add "owner" modifier

* Add comment explaining security details

Added a comment explaining why it is secure to allow to access
this folder.

* Fixed comment.