lp://staging/~elopio/snap-confine/autopkgtest

Branch merges

Propose for merging

No branches dependent on this one.

Ready for review for merging into lp://staging/~snappy-dev/snap-confine/trunk

Snappy Developers: Pending requested 2016-05-20

Diff: 183 lines (+70/-19)

8 files modified

debian/tests/control (+3/-0)
tests/common.sh (+10/-1)
tests/test_bad_appname_whitelist (+29/-0)
tests/test_complain (+4/-0)
tests/test_create_user_data (+9/-0)
tests/test_good_appname_whitelist (+7/-18)
tests/test_restrictions_working (+4/-0)
tests/test_unrestricted (+4/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #1583827: The package has no autopkgtests

Undecided

Invalid

Link a bug report

Related blueprints

139. By Leo Arias <email address hidden> on 2016-05-20

Fixes lp: #1583827

138. By Leo Arias <email address hidden> on 2016-05-20

Skip the tests that are not passing when installed.

137. By Leo Arias <email address hidden> on 2016-05-20

Try with needs-root.

136. By Leo Arias <email address hidden> on 2016-05-20

Added autopkgtests.

135. By Jamie Strandboge on 2016-05-10

debian/usr.bin.ubuntu-core-launcher: add workaround rules for ecryptfs
until the upcoming kernel fix lands everywhere (LP: #1574556)

134. By Jamie Strandboge on 2016-04-29

* SECURITY UPDATE: delayed attack snap data theft and privilege escalation
  when using Snappy on traditional Ubuntu (classic) systems (LP: #1576699)
  - src/main.c: remove glob code and hardcode /snap/ubuntu-core/current
    instead. The glob code both used an improper glob and performed an
    incorrect check due to a typo which allowed a snap named ubuntu-core-...
    to be bind mounted into application runtimes instead of the ubuntu-core
    OS snap. Ubuntu Core removed .<origin> and .sideload from the SNAP path
    so the glob can simply be dropped.
  - CVE-2016-1580
* debian/usr.bin.ubuntu-core-launcher:
  - only allow mounting /snap/ubuntu-core/*/... to safeguard against this in
    the future
  - add lib32 and libx32 to match setup_snappy_os_mounts()

133. By Jamie Strandboge on 2016-04-15

release 1.0.27

132. By Jamie Strandboge on 2016-04-15

- make whitelist_re strictly follow the 16.04 specification and adjust
  testsuite accordingly

131. By Jamie Strandboge on 2016-04-15

src/main.c: don't prepend snap. or snap_ since snapd is doing that for us
now (LP: #1571048)

130. By Jamie Strandboge on 2016-04-15

release 1.0.26