Merge lp:~sergiusens/snappy/seccompError into lp:~snappy-dev/snappy/15.04-deprecated

[Sergio Schvezov]

Backport, Provide a more specific error than '%f is a directory' when missing a seccomp entry

[Ricardo Salveti (rsalveti)]

Looks good.

review: Approve

=== modified file 'snappy/errors.go'
--- snappy/errors.go	2015-07-06 19:08:24 +0000
+++ snappy/errors.go	2015-07-06 19:59:08 +0000
@@ -143,6 +143,9 @@
 
 	// ErrInvalidPart is returned when something on the filesystem does not make sense
 	ErrInvalidPart = errors.New("invalid package on system")
+
+	// ErrNoSeccompPolicy is returned when an expected seccomp policy is not provided.
+	ErrNoSeccompPolicy = errors.New("no seccomp policy provided")
 )
 
 // ErrArchitectureNotSupported is returned when trying to install a snappy package that

=== modified file 'snappy/security.go'
--- snappy/security.go	2015-04-22 07:11:43 +0000
+++ snappy/security.go	2015-07-06 19:59:08 +0000
@@ -151,6 +151,10 @@
 	syscalls := []string{}
 
 	if sd.SecurityOverride != nil {
+		if sd.SecurityOverride.Seccomp == "" {
+			return nil, ErrNoSeccompPolicy
+		}
+
 		fn := filepath.Join(baseDir, sd.SecurityOverride.Seccomp)
 		var s securitySeccompOverride
 		err := readSeccompOverride(fn, &s)

=== modified file 'snappy/security_test.go'
--- snappy/security_test.go	2015-04-19 14:02:33 +0000
+++ snappy/security_test.go	2015-07-06 19:59:08 +0000
@@ -37,6 +37,13 @@
 	c.Assert(string(content), Equals, expected)
 }
 
+func (a *SecurityTestSuite) TestSnappyNoSeccompOverrideEntry(c *C) {
+	sd := SecurityDefinitions{SecurityOverride: &SecurityOverrideDefinition{}}
+
+	_, err := generateSeccompPolicy(c.MkDir(), "appName", sd)
+	c.Assert(err, Equals, ErrNoSeccompPolicy)
+}
+
 // no special security settings generate the default
 func (a *SecurityTestSuite) TestSnappyHandleApparmorSecurityDefault(c *C) {
 	sec := &SecurityDefinitions{}