~mvo/snapd/+git/snapd-mvo:snap-confine-leak

Last commit made on 2019-08-15
Get this branch:
git clone -b snap-confine-leak https://git.launchpad.net/~mvo/snapd/+git/snapd-mvo

Branch merges

Branch information

Name:
snap-confine-leak
Repository:
lp:~mvo/snapd/+git/snapd-mvo

Recent commits

8384a55... by Michael Vogt

Merge remote-tracking branch 'upstream/master' into snap-confine-leak

9df99b6... by Michael Vogt

Merge pull request #7248 from zyga/fix/snap-remove-removes-ns

interfaces/mount: discard mount ns on backend Remove

fb4c5c7... by Michael Vogt

Merge pull request #7249 from bboozzoo/bboozzoo/build-on-rhel

packaging/fedora: build on RHEL8

928130a... by Samuele Pedroni

overlord/devicestate: support seeding a classic system with the snapd snap and no core

This cleans up and tests a bit more in the first boot tests in general as well.

caa57b9... by Zygmunt Krynicki

interfaces/mount: discard mount ns on backend Remove

When a snap is removed each security backend is asked to remove the
security profiles associated with the snap in question. For the mount
backend that would just remove the desired mount namespace profile.

While this part worked correctly there was more to be done. The system
may still have the preserved mount namespace as well as the actual
applied (current) mount profiles that exist therein.

In a case where a snap was installed but the installation failed because
of a hook issue, the system would be left in a state where an existing
mount namespace would be left behind.

Related-To: https://bugs.launchpad.net/snapd/+bug/1808821
Signed-off-by: Zygmunt Krynicki <email address hidden>

2d30453... by Maciej Borzecki

Merge remote-tracking branch 'upstream/master' into bboozzoo/build-on-rhel

d20a83a... by Michael Vogt

Merge pull request #7250 from mvo5/unbreak-master2

interfaces: fix test failure in gpio_control_test

a75d8c6... by Maciej Borzecki

packaging/fedora: make sure RHEL8 static Go binares are built as PIE

Signed-off-by: Maciej Borzecki <email address hidden>

61cc58d... by Michael Vogt

packaging: fix removal of old apparmor profile

We saw some test failures because of conflicting profiles. Upon
further inspection we noticed that the apparomor profile transition
of the "snap-confine" profile to the "snap-confine.real" profile
is not working correctly.

This PR fixes the transition and also extends the upgrade-from-2.15
test to cover this better.

679304e... by Michael Vogt

interfaces: fix test failure in gpio_control_test

After merging PR#6950 master failed because it got a new
gpio-control interface which uses the old style of testing
for os-slots. This is no longer used, see:
https://github.com/snapcore/snapd/pull/6950/files

This will unbreak the current unit test failures in master.