~mvo/snapd/+git/snapd-mvo:rm-aa-profile-snap-cofine-harder

Last commit made on 2019-02-08
Get this branch:
git clone -b rm-aa-profile-snap-cofine-harder https://git.launchpad.net/~mvo/snapd/+git/snapd-mvo

Branch merges

Branch information

Name:
rm-aa-profile-snap-cofine-harder
Repository:
lp:~mvo/snapd/+git/snapd-mvo

Recent commits

580c8ac... by Michael Vogt

debian: ensure leftover usr.lib.snapd.snap-confine is gone

In commit 0dce4704a5d (2017-03-28, snapd v2.23.6) we renamed
/etc/apparmor.d/usr.lib.snap-confine to usr.lib.snap-confine.real
to fix LP: #1673247 - however some people (upgrades?) still have
the old usr.lib.snap-confine file. This seems to be loaded instead
of the correct usr.lib.snap-confine.real profile. To fix this we
use the rather blunt approach to remove the file forcefully if
it is unchanged.

a6d10ea... by Michael Vogt

Merge pull request #6476 from chipaca/no-double-teepees

cmd/snap: tweak man output to have no doubled up .TP lines

ab5b0d3... by Michael Vogt

Merge pull request #6480 from mvo5/release-2.37.2

release: 2.37.2

368dd79... by Michael Vogt

Merge remote-tracking branch 'upstream/master' into release-2.37.2

451fd1d... by Michael Vogt

debian: add placeholder changelog 2.37.2

e462b1c... by Michael Vogt

releasing package snapd version 2.37.2

e5f7059... by Michael Vogt

Merge pull request #6479 from mvo5/allow-non-classic-with-classic-2.37

cmd/snap, overlord/snapstate: silently ignore classic flag when a snap is strictly confined (2.37)

313b350... by Michael Vogt

cmd_snap_op: do not use esc.bold (not available yet in 2.37)

6fd2a18... by Maciej Borzecki

cmd/snap, overlord/snapstate: silently ignore classic flag when a snap is strictly confined (#6477)

When installing a strict snap withthe --classic snap like:

    snap install strict-snap --classic

this should be allowed because the user expresses that he/she is willing to install a classic snap.
If the snap is not classic that is even better and no reason to error (a warning is appropriate to
ensure the user is not under the misconception that the snap gets installed with classic confinement).

* overlord/snapstate: silently ignore classic flag when installing a non classic snap

Signed-off-by: Maciej Borzecki <email address hidden>

* cmd/snap: warn when --classic flag was ignored

Signed-off-by: Maciej Borzecki <email address hidden>

* overlord/snapstate: review feedback

Signed-off-by: Maciej Borzecki <email address hidden>

* tests/main/install-errors: verify --classic flag for non-classic snaps

Signed-off-by: Maciej Borzecki <email address hidden>

* cmd/snap: display warning before snap install summary

Signed-off-by: Maciej Borzecki <email address hidden>

* tests/main/install-errors: fix error match

Signed-off-by: Maciej Borzecki <email address hidden>

* travis: quote Go version

Signed-off-by: Maciej Borzecki <email address hidden>

9e3b3a4... by Maciej Borzecki

cmd/snap, overlord/snapstate: silently ignore classic flag when a snap is strictly confined (#6477)

When installing a strict snap withthe --classic snap like:

    snap install strict-snap --classic

this should be allowed because the user expresses that he/she is willing to install a classic snap.
If the snap is not classic that is even better and no reason to error (a warning is appropriate to
ensure the user is not under the misconception that the snap gets installed with classic confinement).

* overlord/snapstate: silently ignore classic flag when installing a non classic snap

Signed-off-by: Maciej Borzecki <email address hidden>

* cmd/snap: warn when --classic flag was ignored

Signed-off-by: Maciej Borzecki <email address hidden>

* overlord/snapstate: review feedback

Signed-off-by: Maciej Borzecki <email address hidden>

* tests/main/install-errors: verify --classic flag for non-classic snaps

Signed-off-by: Maciej Borzecki <email address hidden>

* cmd/snap: display warning before snap install summary

Signed-off-by: Maciej Borzecki <email address hidden>

* tests/main/install-errors: fix error match

Signed-off-by: Maciej Borzecki <email address hidden>

* travis: quote Go version

Signed-off-by: Maciej Borzecki <email address hidden>