lp:~snappy-dev/snap-confine/trunk

Created by Michael Vogt and last modified
Get this branch:
bzr branch lp:~snappy-dev/snap-confine/trunk
Members of Snappy Developers can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Snappy Developers
Project:
snap-confine
Status:
Development

Recent revisions

136. By Steve Langasek

releasing package ubuntu-core-launcher version 1.0.29

135. By Jamie Strandboge

debian/usr.bin.ubuntu-core-launcher: add workaround rules for ecryptfs
until the upcoming kernel fix lands everywhere (LP: #1574556)

134. By Jamie Strandboge

* SECURITY UPDATE: delayed attack snap data theft and privilege escalation
  when using Snappy on traditional Ubuntu (classic) systems (LP: #1576699)
  - src/main.c: remove glob code and hardcode /snap/ubuntu-core/current
    instead. The glob code both used an improper glob and performed an
    incorrect check due to a typo which allowed a snap named ubuntu-core-...
    to be bind mounted into application runtimes instead of the ubuntu-core
    OS snap. Ubuntu Core removed .<origin> and .sideload from the SNAP path
    so the glob can simply be dropped.
  - CVE-2016-1580
* debian/usr.bin.ubuntu-core-launcher:
  - only allow mounting /snap/ubuntu-core/*/... to safeguard against this in
    the future
  - add lib32 and libx32 to match setup_snappy_os_mounts()

133. By Jamie Strandboge

release 1.0.27

132. By Jamie Strandboge

- make whitelist_re strictly follow the 16.04 specification and adjust
  testsuite accordingly

131. By Jamie Strandboge

src/main.c: don't prepend snap. or snap_ since snapd is doing that for us
now (LP: #1571048)

130. By Jamie Strandboge

release 1.0.26

129. By Jamie Strandboge

src/main.c: allow caps in appname (LP: #1570914)

128. By Michael Vogt

releasing package ubuntu-core-launcher version 1.0.25.1

127. By Michael Vogt

check for both src and dst mount points when doing the
ubuntu-core overlay mounts (LP: #1570712)

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
This branch contains Public information 
Everyone can see this information.