~mvo/snapd/+git/snapd-mvo:fix-wal-e-2.37

Last commit made on 2019-02-05
Get this branch:
git clone -b fix-wal-e-2.37 https://git.launchpad.net/~mvo/snapd/+git/snapd-mvo

Branch merges

Branch information

Name:
fix-wal-e-2.37
Repository:
lp:~mvo/snapd/+git/snapd-mvo

Recent commits

103dfdb... by Michael Vogt

snap-confine: fix classic snaps for users with /var/lib/* homedirs (#6471)

When we removed the quirks system in commit [1da9316](https://github.com/snapcore/snapd/commit/1da9316e717d119852b827becb5a17b33713d032) we removed the following apparmor rule as well:

```
     /var/lib/** rw,
```
The unintended side-effect of this change is that we broke snaps
for users with homedirs in /var/lib/ like "postgresql", "jenkins"
and potentially more. They now get the error:

```
cannot create user data directory: /var/lib/postgresql/snap/wal-e/13: Permission denied
```
We added a special case for jenkins which unfortunately is not
enough. This PR makes the snap-confine rule more general which
will unbreak all classic snaps that use /var/lib/* as their
homedir. This will fix the wal-e snap which is classic and needs
to run as the postgresql user to perform its tasks.

We probably still need a followup that deals with confined snaps
like jenkins in a more general manner like the current targeted
jenkins fix.

b1597f7... by Michael Vogt

Merge pull request #6459 from mvo5/tests-fix-logs-daemon-notify-2.37

tests: iterate getting journal logs to support delay on boards on daemon-notify test (2.37)

5947b18... by Michael Vogt

Merge pull request #6455 from jdstrand/add-one-more-rule-for-sun-template-2.37

interfaces/apparmor: deny inet/inet6 in snap-update-ns profile (2.37)

e2ed926... by Sergio Cazzolato

Improve check with connected interface

effb1c0... by Sergio Cazzolato

Update wording on test

46136f7... by Sergio Cazzolato

Iterate getting journal logs to support delay on boards

d8917b8... by Michael Vogt

Merge pull request #6434 from jdstrand/add-yubikey-interface-2.37

interfaces: add u2f-devices interface (2.37)

5e70aa2... by Jamie Strandboge

interfaces/apparmor: deny inet/inet6 in snap-update-ns profile

Sometimes snap-update-ns triggers inet and inet6 stream denials. This is
related to LP: #1595993. The denials are harmless in the case of
snap-update-ns and we don't want to allow it network access anyway.
Importantly, this would conflict with nfsSnippet, but nfsSnippet is not
added to snap-update-ns profiles, so there is no problem.

53c5cee... by Jamie Strandboge

use list of structs rather than map (thanks zyga)

7ca4696... by Jamie Strandboge

rename to u2f-devices