lp:~mvo/snap-confine/environment-file

Branch merges

Propose for merging

No branches dependent on this one.

Ready for review for merging into lp:~snappy-dev/snap-confine/trunk

Zygmunt Krynicki: Needs Fixing on 2016-05-19

Diff: 203 lines (+147/-0)

6 files modified

debian/usr.bin.ubuntu-core-launcher (+3/-0)
src/environment.c (+85/-0)
src/environment.h (+23/-0)
src/main.c (+4/-0)
tests/common.sh (+4/-0)
tests/test_environment (+28/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

139. By Michael Vogt on 2016-05-19

fix missing dereference (thanks @zyga)

138. By Michael Vogt on 2016-05-19

kill final \n

137. By Michael Vogt on 2016-05-19

fix confinment, improve debug

136. By Michael Vogt on 2016-05-19

add support for adding an environment from a special environment file

135. By Jamie Strandboge on 2016-05-10

debian/usr.bin.ubuntu-core-launcher: add workaround rules for ecryptfs
until the upcoming kernel fix lands everywhere (LP: #1574556)

134. By Jamie Strandboge on 2016-04-29

* SECURITY UPDATE: delayed attack snap data theft and privilege escalation
  when using Snappy on traditional Ubuntu (classic) systems (LP: #1576699)
  - src/main.c: remove glob code and hardcode /snap/ubuntu-core/current
    instead. The glob code both used an improper glob and performed an
    incorrect check due to a typo which allowed a snap named ubuntu-core-...
    to be bind mounted into application runtimes instead of the ubuntu-core
    OS snap. Ubuntu Core removed .<origin> and .sideload from the SNAP path
    so the glob can simply be dropped.
  - CVE-2016-1580
* debian/usr.bin.ubuntu-core-launcher:
  - only allow mounting /snap/ubuntu-core/*/... to safeguard against this in
    the future
  - add lib32 and libx32 to match setup_snappy_os_mounts()

133. By Jamie Strandboge on 2016-04-15

release 1.0.27

132. By Jamie Strandboge on 2016-04-15

- make whitelist_re strictly follow the 16.04 specification and adjust
  testsuite accordingly

131. By Jamie Strandboge on 2016-04-15

src/main.c: don't prepend snap. or snap_ since snapd is doing that for us
now (LP: #1571048)

130. By Jamie Strandboge on 2016-04-15

release 1.0.26