lp:~jdstrand/snap-confine/ubuntu-core-launcher.nnp-off

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp:~snappy-dev/snap-confine/trunk at revision 99

Tyler Hicks (community): Abstain on 2016-03-31

Seth Arnold: Needs Fixing on 2016-03-21

Jamie Strandboge (community): Approve on 2016-03-21

Diff: 181 lines (+79/-15)

5 files modified

debian/changelog (+10/-0)
src/main.c (+27/-14)
src/seccomp.c (+35/-1)
tests/test_create_user_data (+4/-0)
tests/test_restrictions_working (+3/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

106. By Jamie Strandboge on 2016-03-21

clarify changelog

105. By Jamie Strandboge on 2016-03-21

no need to check getuid() and getgid() after only dropping euid
update comments

104. By Jamie Strandboge on 2016-03-19

make priv dropping/raising errors more clear
adjust checks for when to raise/drop to work with sudo

103. By Jamie Strandboge on 2016-03-19

update testsuite for getuid and geteuid

102. By Jamie Strandboge on 2016-03-19

update changelog
adjust check to permanently drop
fix testsuite

101. By Jamie Strandboge on 2016-03-19

old drop euid so we can raise privs for seccomp_load(), then drop permanently

100. By Jamie Strandboge on 2016-03-18

allow testsuite to run with nnp

99. By Jamie Strandboge on 2016-03-18

use seccomp_attr_set() to turn SCMP_FLTATR_CTL_NNP off
add comments for why turning off nnp is ok

TODO: the above only works for root, need to adjust privilege dropping for
non-root users

98. By Michael Vogt on 2016-03-09

remove obsolete prefix check

97. By Jamie Strandboge on 2016-02-26

[ Jamie Strandboge ]
src/main.c: don't set the obsoleted SNAPP_APP_TMPDIR (LP: #1550405)