lp:~vorlon/snap-confine/debian
- Get this branch:
- bzr branch lp:~vorlon/snap-confine/debian
Branch merges
Branch information
Recent revisions
- 140. By Steve Langasek
-
Include dpkg-buildflags CPPFLAGS, not just CFLAGS, to get libc fortify
support. - 138. By Steve Langasek
-
* Update Standards-Version.
* Adjust package description; this is not just for running apps on Ubuntu
systems. - 135. By Jamie Strandboge
-
debian/
usr.bin. ubuntu- core-launcher: add workaround rules for ecryptfs
until the upcoming kernel fix lands everywhere (LP: #1574556) - 134. By Jamie Strandboge
-
* SECURITY UPDATE: delayed attack snap data theft and privilege escalation
when using Snappy on traditional Ubuntu (classic) systems (LP: #1576699)
- src/main.c: remove glob code and hardcode /snap/ubuntu-core/current
instead. The glob code both used an improper glob and performed an
incorrect check due to a typo which allowed a snap named ubuntu-core-...
to be bind mounted into application runtimes instead of the ubuntu-core
OS snap. Ubuntu Core removed .<origin> and .sideload from the SNAP path
so the glob can simply be dropped.
- CVE-2016-1580
* debian/usr.bin. ubuntu- core-launcher:
- only allow mounting /snap/ubuntu-core/*/ ... to safeguard against this in
the future
- add lib32 and libx32 to match setup_snappy_os_mounts( )
Branch metadata
- Branch format:
- Branch format 7
- Repository format:
- Bazaar repository format 2a (needs bzr 1.16 or later)
- Stacked on:
- lp:~snappy-dev/snap-confine/trunk