Created by Michael Vogt and last modified
Get this branch:
bzr branch lp:~snappy-dev/snap-confine/trunk
Members of Snappy Developers can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Snappy Developers

Recent revisions

136. By Steve Langasek

releasing package ubuntu-core-launcher version 1.0.29

135. By Jamie Strandboge

debian/usr.bin.ubuntu-core-launcher: add workaround rules for ecryptfs
until the upcoming kernel fix lands everywhere (LP: #1574556)

134. By Jamie Strandboge

* SECURITY UPDATE: delayed attack snap data theft and privilege escalation
  when using Snappy on traditional Ubuntu (classic) systems (LP: #1576699)
  - src/main.c: remove glob code and hardcode /snap/ubuntu-core/current
    instead. The glob code both used an improper glob and performed an
    incorrect check due to a typo which allowed a snap named ubuntu-core-...
    to be bind mounted into application runtimes instead of the ubuntu-core
    OS snap. Ubuntu Core removed .<origin> and .sideload from the SNAP path
    so the glob can simply be dropped.
  - CVE-2016-1580
* debian/usr.bin.ubuntu-core-launcher:
  - only allow mounting /snap/ubuntu-core/*/... to safeguard against this in
    the future
  - add lib32 and libx32 to match setup_snappy_os_mounts()

133. By Jamie Strandboge

release 1.0.27

132. By Jamie Strandboge

- make whitelist_re strictly follow the 16.04 specification and adjust
  testsuite accordingly

131. By Jamie Strandboge

src/main.c: don't prepend snap. or snap_ since snapd is doing that for us
now (LP: #1571048)

130. By Jamie Strandboge

release 1.0.26

129. By Jamie Strandboge

src/main.c: allow caps in appname (LP: #1570914)

128. By Michael Vogt

releasing package ubuntu-core-launcher version

127. By Michael Vogt

check for both src and dst mount points when doing the
ubuntu-core overlay mounts (LP: #1570712)

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
This branch contains Public information 
Everyone can see this information.