Merge lp:~snappy-dev/snap-confine/lp1496070 into lp:~snappy-dev/snap-confine/trunk

[Jamie Strandboge]

debian/usr.bin.ubuntu-core-launcher (LP: #1496070):
- allow read to /usr/bin/ubuntu-core-launcher
- allow mmap and read to /lib/@{multiarch}/ld-*.so

debian/usr.bin.ubuntu-core-launcher (LP: #1496070):
- allow read to /usr/bin/ubuntu-core-launcher
- allow mmap and read to /lib/@{multiarch}/ld-*.so

=== modified file 'debian/usr.bin.ubuntu-core-launcher'
--- debian/usr.bin.ubuntu-core-launcher	2015-08-19 13:20:44 +0000
+++ debian/usr.bin.ubuntu-core-launcher	2015-09-15 17:51:53 +0000
@@ -5,6 +5,7 @@
     # We run privileged, so be fanatical about what we include and don't use
     # any abstractions
     /etc/ld.so.cache r,
+    /lib/@{multiarch}/ld-*.so mr,
     # libc, you are funny
     /lib/@{multiarch}/libc{,-[0-9]*}.so* mr,
     /lib/@{multiarch}/libpthread{,-[0-9]*}.so* mr,
@@ -16,6 +17,8 @@
     /usr/lib/@{multiarch}/libseccomp.so* mr,
     /lib/@{multiarch}/libseccomp.so* mr,
 
+    /usr/bin/ubuntu-core-launcher r,
+
     /dev/null rw,
     /dev/full rw,
     /dev/zero rw,