lp:~zyga/snap-confine/new-fhs

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp:~snappy-dev/snap-confine/trunk

Steven Wilkin (community): Approve on 2016-04-11

Diff: 12 lines (+1/-1)

1 file modified

src/seccomp.c (+1/-1)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

115. By Zygmunt Krynicki on 2016-04-10

Load seccomp profiles from /var/lib/snapd/seccomp/profiles

This change matches what's happened in snappy upstream over weekend.

114. By Jamie Strandboge on 2016-04-01

update testsuite to use $myprofile as variable name instead of $aaprofile--
these are seccomp profiles, not apparmor

113. By Jamie Strandboge on 2016-04-01

preprocess the seccomp file for '@' directives

112. By Jamie Strandboge on 2016-03-31

#define _GNU_SOURCE to fix implicit declaration of unshare()

111. By Jamie Strandboge on 2016-03-31

clarify debian/changlog entry for README change

110. By Jamie Strandboge on 2016-03-31

Various fixes to address Seth's feedback:
- cleaned up 'out' handling and die instead
- fixed the typo
- verify snprint() >= 512 (I increased this length) and added tests
- add test for filter missing trailing newline (I didn't change the
  line-too-long handling, but did add tests and verify we must end with trailing newline
- use strcmp() with "@unrestricted". add @unrestricted near miss tests
- use getresuid() instead of UBUNTU_CORE_LAUNCHER_NO_ROOT
- replace getenv() with secure_getenv() everywhere we can
- check return code of fork()
- verify return code of fclose()
- simplified final execv()

In addition:
- don't support obsoleted SNAP_APP_TMPDIR and SNAP_APP_USER_DATA_PATH
- use uid_t and gid_t instead of unsigned
- check return codes of other (f)close()s to help futureproof

109. By Jamie Strandboge on 2016-03-30

update debian/README.syscalls for 4.4

108. By Jamie Strandboge on 2016-03-30

add README.syscalls

107. By Jamie Strandboge on 2016-03-30

add debian/README.syscalls from ubuntu-core-security since that package is
going away

ignore src/tmp

106. By Jamie Strandboge on 2016-03-29

update changelog for last commit