5540 Commits

Author SHA1 Message Date
Michael Vogt
f124b8c048 Merge pull request #11854 from jhenstridge/steam-support-updates
interfaces/builtin: add more permissions for steam-support
2022-07-26 15:44:08 +02:00
Michael Vogt
b6965b15c1 Merge pull request #11928 from IsaacJT/posix-mq-list
interfaces: posix-mq: allow specifying message queue paths as an array
2022-07-25 15:36:12 +02:00
Michael Vogt
906a807a3b Merge pull request #11846 from mardy/interfaces-remove-aa-names
i/b/desktop,unity7: remove name= specification on D-Bus signals
2022-07-25 12:17:23 +02:00
Michael Vogt
1efe2419d4 interfaces: add one more unit testcase "test-one-empty-path-array" 2022-07-25 12:06:52 +02:00
Michael Vogt
8cf768e163 interfaces: include plug/slot info in apparmor comment (thanks to Samuele for the suggestion) 2022-07-22 12:00:51 +02:00
James Henstridge
81899e1e74 interfaces/builtin: explicitly deny execute permission to setuid binaries in /usr/bin 2022-07-22 17:09:01 +08:00
James Henstridge
f90460e169 interfaces/builtin: allow steam-support to bind mount removable media 2022-07-20 19:04:45 +08:00
James Henstridge
005d3ba1ac interfaces/builtin: allow opengl to read/map the Wine DLLs shipped with nvidia drivers.
These are used by Steam/Proton. It doesn't look like there is a need for
more symlink trees in /var/lib/snapd/lib, since it finds the DLLs
relative to the location of libGLX_nvidia.so.0:

7523181830/proton (L243-L322)
2022-07-20 18:48:12 +08:00
James Henstridge
07916a2a02 interfaces/builtin: allow steam-support to bind mount libraries in subdirs
This was needed to allow pressure-vessel to bind mount the vdpau libraries.
2022-07-20 18:48:12 +08:00
James Henstridge
8d0979829b interfaces/builtin: add more permissions for steam-support
Let the snap execute anything under /usr/bin and /usr/sbin, since all
those binaries will be provided by the pressure-vessel runtime.

Let pv-bwrap bind mount the nvidia drivers on the host system.
2022-07-20 18:48:12 +08:00
Michael Vogt
b745f83a8a Merge pull request #11949 from bugraaydogar/baydogar-cleanup-hardware-observe
interfaces/hardware-observe: clean up reading access to sysfs
2022-07-15 09:13:08 +02:00
Philip Meulengracht
73b9a5cf65 interfaces/apparmor: add permissions for per-snap directory on ubuntu-save partition
* interfaces/apparmor: add permissions for per-snap directory on ubuntu-save path

* interfaces/apparmor: only add ubuntu-save rule for core systems

* interfaces: tweak TestCoreSnippetOnCoreSystem as suggested by Samuele (thanks!)

Co-authored-by: Michael Vogt <mvo@ubuntu.com>
2022-07-13 09:16:47 +02:00
Michael Vogt
e7df2b7a7e Revert "overlord,snap: add support for per-snap storage on ubuntu-save"
This reverts commit 8b1b0c44d9

It was merged accidently and prematurely.
2022-07-12 17:44:44 +02:00
Philip Meulengracht
8b1b0c44d9 overlord,snap: add support for per-snap storage on ubuntu-save
* interfaces/apparmor: add permissions for per-snap directory on ubuntu-save path

* overlord/snapstate: implement support for storing data onto ubuntu-save partition on a per-snap basis

* tests/nested/core/save-data: fix shellcheck warning

* many: a bit of code cleanup

* tests/nested/core/save-data: cleanup spread test

* many: fix unit tests that were failing, add additional unit test for new handlers

* tests/main/snap-env: fix spread test after adding a new ENV variable

* overlord/snapstate: minor cleanup

* overlord/snapstate: review feedback

remove the ubuntu-save task, move some of the functionality into the backend, add unit tests

* multiple: more changes, fix unit tests

* overlord/snapstate: additional unit tests

* tests: remove check that is no longer the case for non core platforms
2022-07-12 17:37:38 +02:00
Buğra Aydoğar
00fb1763f4 interfaces/hardware-observe: clean up reading access to sysfs 2022-07-12 13:13:03 +03:00
Buğra Aydoğar
f588badc93 interfaces/display-control: allow changing brightness value 2022-07-11 15:54:00 +03:00
Alfonso Sánchez-Beato
ae24310eca i/apparmor: allow calling which.debianutils
which.debianutils is the binary really invoked when which is run on
core22 bases. Make sure it can be run by default.
2022-07-06 15:12:25 +01:00
Michael Vogt
f8f5575eb3 Merge pull request #11832 from mardy/kernel-module-load-dynamic
interfaces: dynamic loading of kernel modules
2022-07-01 16:36:36 +02:00
Isaac True
b382b7edc0 interfaces: posix-mq: refactor AppArmor snippet generation
Signed-off-by: Isaac True <isaac.true@canonical.com>
2022-06-30 15:41:48 +02:00
Isaac True
73729ab839 interfaces: posix-mq: add check for zero-length paths
This prevents the following panic when passing a zero-length path to the
posix-mq interface:

    Panic: runtime error: index out of range [0] with length 0

Signed-off-by: Isaac True <isaac.true@canonical.com>
2022-06-30 14:40:31 +02:00
Isaac True
92b3f525d5 interfaces: posix-mq: allow specifying message queue paths as an array
Posix message queue paths can now either be specified as a single string or
an array of strings. This allows consolidating many slots with different
paths and identical permissions into a single slot.

Signed-off-by: Isaac True <isaac.true@canonical.com>
2022-06-30 12:22:21 +02:00
Miguel Pires
72e633790a Merge pull request #11922 from MiguelPires/observer-mem-stats
interfaces: add memory stats to system_observe
2022-06-30 10:31:22 +01:00
Alex Murray
69f5537fa4 interfaces/pwm: Remove implicitOnCore/implicitOnClassic
The pwm interface requires a gadget snap to define a slot and so is not
implicit on either core or classic.

Signed-off-by: Alex Murray <alex.murray@canonical.com>
2022-06-29 14:13:25 +09:30
Alberto Mardegan
fc1f83d304 Merge branch 'master' into kernel-module-load-dynamic 2022-06-29 07:42:16 +03:00
Miguel Pires
21b5ae73c3 interfaces: add memory stats to system_observe
Signed-off-by: Miguel Pires <miguel.pires@canonical.com>
2022-06-28 17:13:38 +01:00