interfaces: add missing adjtimex to time-control (#6943)
This came up during snapping "chrony" - apparently we do not allow
adjtimex in time-control but its used by chrony and I see no reason
not to add it. Hence this PR :)
data/selinux: permit init_t to remount snappy_snap_t (#6946)
Systemd services that get a new mount namespace on startup fail due to SELinux
blocking system from remounting /var/lib/snapd/snap into the new mount ns.
Since we cannot declare fs_type() and generate contexts through genfscon outside
of core policy, add an explicit permission for init_t.
cmd/snap: test for a friendly error on 'okay' without 'warnings'
This is a test to cover what @ardaguclu helpfully fixed for us: that
when you run `snap okay` before ever running `snap warnings` you would
get a nasty error instead of something that explained what was going
on.