Commit Graph

  • a2df4a7c7f rework signature type to be a prefix to the signature blob, calling one signature type and the other signature packet Samuele Pedroni 2015-11-11 18:06:34 +01:00
  • 7ec70c79a3 Merge pull request #70 from elopio/ignore_reboot_skips Federico Gimenez 2015-11-11 13:12:18 +01:00
  • dd7c5404bb Merge pull request #75 from strukturag/fancycode-cli-depends John Lenton 2015-11-11 11:45:18 +00:00
  • 0c5f18abbd Merge branch 'master' into asserts-assertion-decode Samuele Pedroni 2015-11-11 11:40:59 +01:00
  • 3d182597d3 Merge remote-tracking branch 'upstream/master' Samuele Pedroni 2015-11-11 11:39:39 +01:00
  • bb39b5e7ef describe format in the doc comment to Decode Samuele Pedroni 2015-11-11 11:36:26 +01:00
  • fe3bb5bdb5 test that Decode built the right type of assertion Samuele Pedroni 2015-11-11 11:35:49 +01:00
  • 565bed60cf Merge pull request #66 from pedronis/asserts-generate-key-and-import-key Michael Vogt 2015-11-11 11:02:38 +01:00
  • 7b57199de9 Merge remote-tracking branch 'upstream/master' into feature/native-security-policygen-regen Michael Vogt 2015-11-11 09:59:12 +01:00
  • d9ca8e0754 add warning on security-overrides.{apparmor,seccomp} usage Michael Vogt 2015-11-11 09:54:11 +01:00
  • 66da648492 Merge branch 'asserts-generate-key-and-import-key' Samuele Pedroni 2015-11-11 08:39:35 +01:00
  • c48de148df fix s/me/we/ Samuele Pedroni 2015-11-11 08:38:42 +01:00
  • 55f925a33e Add test. Leo Arias 2015-11-10 23:51:31 -06:00
  • 6c3fcbb875 Panic if the regexp returns an error, as suggested by niemeyer. Leo Arias 2015-11-10 23:30:06 -06:00
  • 958f70bbd6 Merge branch 'mvo' into security.cleanup Jamie Strandboge 2015-11-10 15:04:27 -06:00
  • b2626d5a16 Merge branch 'feature/native-security-policygen-regen' of https://github.com/mvo5/snappy into mvo Jamie Strandboge 2015-11-10 15:00:51 -06:00
  • 9a4cdccf28 Merge pull request #72 from chipaca/fix-15.04-run-hooks-order Gustavo Niemeyer 2015-11-10 16:23:51 -02:00
  • bd25292b9c Merge pull request #71 from chipaca/fix-run-hooks-order Gustavo Niemeyer 2015-11-10 16:22:45 -02:00
  • ca910229b3 restart systemd-modules-load.service if config changes modules or modprobe John R. Lenton 2015-11-10 18:03:41 +00:00
  • 181077a89e restart systemd-modules-load.service if config changes modules or modprobe John R. Lenton 2015-11-10 18:03:41 +00:00
  • 7cf5f6e970 Assertion, AssertionBase, Decode Samuele Pedroni 2015-11-10 18:33:36 +01:00
  • 77fd6ce6dd Also ignore SetUpTest and TearDownTest. Leo Arias 2015-11-10 11:31:58 -06:00
  • 4564417555 Use the reboot constants for the checks, as suggested by federico. Leo Arias 2015-11-10 11:14:56 -06:00
  • 19893a4e4a Use a single "security-override" Michael Vogt 2015-11-10 16:24:06 +01:00
  • 68ce6933dd Need "lsb-release" for the postinst of "ubuntu-snappy-cli". Joachim Bauch 2015-11-10 16:22:09 +01:00
  • 6412a0e072 improve comment in scary bit of code John R. Lenton 2015-11-10 10:53:41 +00:00
  • 9b91060980 add support for SecurityOverrides in getAppArmorCustomPolicy() Michael Vogt 2015-11-10 12:00:53 +01:00
  • b03b5a4584 improve comment in scary bit of code John R. Lenton 2015-11-10 10:53:41 +00:00
  • 81c9a87f04 fix a bug in lightweights that set the wrong type for frameworks found by AllPartBags that were lexicographically greater than the oem part. John R. Lenton 2015-11-10 10:25:30 +00:00
  • 25f4c92770 fix a bug in lightweights that set the wrong type for frameworks found by AllPartBags that were lexicographically greater than the oem part. John R. Lenton 2015-11-10 10:25:30 +00:00
  • 24ef277ebb fix crash (and add regression tests) for mergeAppArmorSecurityOverrides() Michael Vogt 2015-11-10 11:18:41 +01:00
  • ba0d1b3b2e re-add findUbuntuVersion() (partially reverts #45faf2b) Michael Vogt 2015-11-10 10:33:23 +01:00
  • 979664178b add test for findCaps() error handling Michael Vogt 2015-11-10 09:06:49 +01:00
  • ef17851b39 improve docstrings Michael Vogt 2015-11-10 08:58:46 +01:00
  • 8a64c339c8 extract findSingleCap/readSingleCapFile from findCaps() and improve error handling Michael Vogt 2015-11-10 08:55:00 +01:00
  • f87fef909e Merge branch 'asserts-generate-key-and-import-key' Samuele Pedroni 2015-11-10 08:39:45 +01:00
  • 3b463f7627 Merge remote-tracking branch 'upstream/master' Samuele Pedroni 2015-11-10 08:38:17 +01:00
  • 7bbfd8076b address review comments (thanks Gustavo!) Michael Vogt 2015-11-10 08:31:40 +01:00
  • 03a61f8247 Also ignore skips after the reboot. Leo Arias 2015-11-09 21:11:41 -06:00
  • 50274cd755 Ignore the skip reports of tests during reboots. Leo Arias 2015-11-09 20:57:26 -06:00
  • 4a1fddd7d9 Added a failing tests for a reboot skip that has to be ignored. Leo Arias 2015-11-09 20:40:39 -06:00
  • 7dc263ec58 Do only one cast to string. Leo Arias 2015-11-09 20:30:57 -06:00
  • 654c0b8265 Merge branch 'mvo5-feature/native-security-policygen-regen' into security.cleanup Jamie Strandboge 2015-11-09 17:36:10 -06:00
  • a3c3bb6638 make run-hooks run before firstboot John R. Lenton 2015-11-09 23:29:28 +00:00
  • 9c50e7d06c make run-hooks run before firstboot John R. Lenton 2015-11-09 23:25:31 +00:00
  • 6745f85c05 Merge branch 'feature/native-security-policygen-regen' of https://github.com/mvo5/snappy into mvo5-feature/native-security-policygen-regen Jamie Strandboge 2015-11-09 16:32:07 -06:00
  • 4fcc8ec1aa Merge branch 'mvo5-feature/native-security-policygen-compare' into security.cleanup Jamie Strandboge 2015-11-09 16:19:36 -06:00
  • e5b283eb49 Merge branch 'feature/native-security-policygen-compare' of https://github.com/mvo5/snappy into mvo5-feature/native-security-policygen-compare Jamie Strandboge 2015-11-09 15:50:32 -06:00
  • 0dcdb2ba66 Merge branch 'mvo5-feature/native-security-policygen-add-hwaccess' into security.cleanup Jamie Strandboge 2015-11-09 15:46:58 -06:00
  • c110d4622c Track CapabilityRepository in the Daemon Zygmunt Krynicki 2015-11-09 18:46:17 +01:00
  • 73c73147b4 Add CapabilityRepository Zygmunt Krynicki 2015-11-09 18:46:01 +01:00
  • 192087acc7 Add initial capability package Zygmunt Krynicki 2015-11-09 10:38:05 +01:00
  • f47267715b Add the testutil package with the Contains Checker Zygmunt Krynicki 2015-11-09 18:44:21 +01:00
  • 67aac4a78f Merge pull request #69 from elopio/bump_subunit Gustavo Niemeyer 2015-11-09 17:13:54 -02:00
  • f26989713a Bumped the version of subunit. Leo Arias 2015-11-09 13:03:39 -06:00
  • 59a285db80 fix typo in name Samuele Pedroni 2015-11-09 17:35:43 +01:00
  • db9ebfb8f3 move tests to their own assert_tests package Samuele Pedroni 2015-11-09 17:28:43 +01:00
  • 35f48b3063 redo error handling with fmt.Errorf so not to lose completely the original error information Samuele Pedroni 2015-11-09 16:11:26 +01:00
  • 72176db5f3 rename argument 'hier' -> 'subpath' Samuele Pedroni 2015-11-09 15:34:42 +01:00
  • 96860511ca return the key fingerprint as a string Samuele Pedroni 2015-11-09 15:20:12 +01:00
  • 093fabdf3e use the name 'database' instead of 'store' Samuele Pedroni 2015-11-09 15:14:07 +01:00
  • 0ec5c30f4c typos everywhere John R. Lenton 2015-11-09 12:16:42 +00:00
  • 9859c27e2c start of asserts package with AssertStore implementing GenerateKey and ImportKey Samuele Pedroni 2015-11-09 13:01:37 +01:00
  • ea93ba5cb2 Merge pull request #59 from mvo5/bugfix/all-good-again John Lenton 2015-11-09 11:37:47 +00:00
  • 1923447a28 Merge pull request #58 from elopio/licensed_test John Lenton 2015-11-09 11:36:57 +00:00
  • 5959583001 Merge pull request #47 from chipaca/test-store-repo-all John Lenton 2015-11-09 11:34:45 +00:00
  • ca537c18df improve the All test itself John R. Lenton 2015-11-09 11:20:42 +00:00
  • 632c8562ef cleanups suggested by @elopio John R. Lenton 2015-11-07 13:06:02 +00:00
  • e1d0e2f025 *blush* use ioutil.ReadFile(), thanks John! Michael Vogt 2015-11-06 17:09:15 +01:00
  • 840acc82c7 Merge remote-tracking branch 'upstream/master' into feature/native-security-policygen-regen Michael Vogt 2015-11-06 16:59:28 +01:00
  • fd8b1f2dab make findCaps() return []string Michael Vogt 2015-11-06 16:45:51 +01:00
  • 753184a0cf make getAppArmorVars "method" of securityAppID struct Michael Vogt 2015-11-06 16:39:24 +01:00
  • ecdfe42490 make policyType a proper type Michael Vogt 2015-11-06 16:27:26 +01:00
  • 70be157c9a address review comments Michael Vogt 2015-11-06 16:05:36 +01:00
  • 33e4bdc4eb make mdlint happy John R. Lenton 2015-11-06 14:47:55 +00:00
  • 2243f8d69d added docs/rest.md John R. Lenton 2015-11-06 13:37:14 +00:00
  • 3ae59d946b Merge pull request #63 from chipaca/skip-ifup-1504 Michael Vogt 2015-11-06 12:37:17 +01:00
  • f222893452 Merge pull request #61 from niemeyer/mvo-sudo-suggestion Michael Vogt 2015-11-06 12:34:55 +01:00
  • 59e2b5910b cherrypicked form master: have a skip-ifup option John R. Lenton 2015-11-05 14:52:02 +00:00
  • f829cfe5cf Merge pull request #62 from chipaca/fix-15.04-imports Michael Vogt 2015-11-06 12:20:59 +01:00
  • 411aa78700 changed all imports to point to gh instead of lp John R. Lenton 2015-11-06 09:49:40 +00:00
  • 80e70f497a move regexp.MustCompile() out of dbusPath() and fix quoting in findWhitespacePrefix() Michael Vogt 2015-11-06 09:47:04 +01:00
  • 45faf2bb09 use release.Get() to determine defaultPolicyVendor/defaultPolicyVersion Michael Vogt 2015-11-06 09:29:40 +01:00
  • 2fbd054730 ensure that {aa,sc}{,Framwork}PolicyDir honor the global rootdir Michael Vogt 2015-11-06 09:15:17 +01:00
  • 3a626310f9 Address trivial from mvo's review on PR #48. Gustavo Niemeyer 2015-11-05 15:54:48 -02:00
  • 05107f26b4 Merge pull request #60 from chipaca/configurable-firstboot-first-ethernet-ifup-stanza-creation John Lenton 2015-11-05 17:23:22 +00:00
  • b62f4b24ca drop empty comment John R. Lenton 2015-11-05 16:19:42 +00:00
  • a2f2de5ae0 simplify, thanks Gustavo Michael Vogt 2015-11-05 16:59:09 +01:00
  • 3ca2772567 use addtrap for the new trap too Michael Vogt 2015-11-05 16:43:50 +01:00
  • 5e8dc53453 Merge remote-tracking branch 'upstream/master' into bugfix/all-good-again Michael Vogt 2015-11-05 16:43:08 +01:00
  • b3aebe4b0e add support for security policy for the snappy config Michael Vogt 2015-11-05 16:39:53 +01:00
  • 7df9c40549 have a skip-ifup option John R. Lenton 2015-11-05 14:52:02 +00:00
  • 0929e5e4ab snappy/security.go: export Pol{Type,Kind,Name} Michael Vogt 2015-11-05 14:41:37 +01:00
  • cd11fcaa2b add test for GeneratePolicyFromFile() and use globalrootdir Michael Vogt 2015-11-05 10:07:17 +01:00
  • ab87e8d98c fix tests in travis (needs some more work, i.e. a common base test class Michael Vogt 2015-11-05 09:53:30 +01:00
  • 9a0099fa35 snappy/common_test.go: fix missing closing ">" in mock apparmor template Michael Vogt 2015-11-05 09:05:30 +01:00
  • 7b92950457 Add addtrap() helper to run-checks Michael Vogt 2015-11-05 08:46:00 +01:00
  • 0304b061ee Merge remote-tracking branch 'upstream/master' into feature/native-security-policygen-regen Michael Vogt 2015-11-05 08:15:18 +01:00
  • 8f3d20c81f address review comments Michael Vogt 2015-11-05 08:08:26 +01:00
  • 2f816dd39b Fixed fmt. Leo Arias 2015-11-05 01:01:42 -06:00