~sylvain-pineau/checkbox-ng:fix-CVE-2021-44731

Branch merges

Propose for merging

Merged into checkbox-ng:master at revision 1941bac47541c5b6b052be64cc8a4b5ddfc11ab1

Sylvain Pineau (community): Approve on 2022-03-21

Diff: 38 lines (+10/-10)

1 file modified

plainbox/impl/session/restart.py (+10/-10)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

9611605... by Sylvain Pineau on 2022-03-21

restart.py: Check for RemoteDebRestartStrategy support first

Due to snapd CVE-2021-44731, the checkbox remote service now runs outside
confinement but fakes env var like SNAP and SNAP_DATA.

The auto detection mechanism must check the RemoteDebRestartStrategy first
because the new systemd service is also named checkbox-ng.service like for
debian packages.

Sharing the same restart strategy logic as debs can only work if the code
using on_ubuntucore() is never reached in this use case.

1f12940... by Ubuntu <email address hidden> on 2022-01-24

Merge #411951 from ~kissiel/checkbox-ng:fix-provider-develop

4bb52f9... by Ubuntu <email address hidden> on 2022-01-23

Merge #414359 from ~kissiel/checkbox-ng:fix-1957187

f0b7375... by Maciej Kisielewski on 2021-11-16

Fix: use universal provider "develop" path

Previously running "develop" subcommand on the manage.py resulted in the
.provider file being created somewhere in user's home. Because of that the
service (which is run as root) did not see it resulting in no "develop"-ed
providers via remote. This patch fixes that problem.

c9e572e... by Maciej Kisielewski on 2021-11-16

Add: inform that the $PROVIDERPATH is defined

This way there's no nasty surprise when the providers aren't loaded properly.

e237a90... by Maciej Kisielewski on 2022-01-19

Fix: tracebacks on wrong secureID in auto-sessions

Fixes LP: #1957187

76fd5f9... by Ubuntu <email address hidden> on 2022-01-17

Merge #414009 from ~kissiel/checkbox-ng:arabian-nights-are-good-too

f3fc63a... by Maciej Kisielewski on 2022-01-11

Add: look for user with UID 1001 if 1000 is NA

9ef6e62... by Ubuntu <email address hidden> on 2022-01-10

Merge #413887 from checkbox-ng:release

Release_2022_Week2

4b52d77... by Jenkins <email address hidden> on 2022-01-10

increment version to v1.17.0.dev0