Commit Graph

  • e038a07485 * Sync with lp:snappy. James Hunt 2015-04-21 13:56:07 +01:00
  • 5eb5af8b08 No namespaces for oem packages Sergio Schvezov 2015-04-21 09:53:41 -03:00
  • 585cf46074 make remove understand and work with namespaces. Update FindSnapBynameAndVersion because that is no longer unique. John R. Lenton 2015-04-21 13:05:22 +01:00
  • 1e31527784 Using an install flag instead Sergio Schvezov 2015-04-21 08:57:20 -03:00
  • 355d4fcaad don't let you sideload something you already have installed by chipaca approved by mvo John R. Lenton 2015-04-21 07:32:28 -04:00
  • 4e8bc2e66f Do not drop suplementary groups, they are important for docker and similar, mkay Michael Vogt 2015-04-21 13:25:16 +02:00
  • 522d5b905a Add the framework back in. by chipaca approved by mvo John R. Lenton 2015-04-21 07:22:11 -04:00
  • 33d9fcc3ec fix off-by-one error Michael Vogt 2015-04-21 13:12:16 +02:00
  • 85477c6c2c Add namespace to TMPDIR. Fix some tests related to that. by chipaca approved by mvo John R. Lenton 2015-04-21 07:12:06 -04:00
  • 06777d55c4 check namespaces on clickInstall => don't let you sideload something you already have installed John R. Lenton 2015-04-21 11:24:35 +01:00
  • 66e2f263a2 always mention the core framework, so the store does what we want, given packages claim to depend on the core framework for apparmor John R. Lenton 2015-04-21 10:43:16 +01:00
  • fd062afaef add namespace to TMPDIR and related John R. Lenton 2015-04-21 10:33:46 +01:00
  • 32f0a29e0c releasing package ubuntu-core-launcher version 0.2.4 0.2.4 Michael Vogt 2015-04-21 09:48:07 +02:00
  • 301a9aef73 src/main.c: remove () Michael Vogt 2015-04-21 09:46:52 +02:00
  • 4cb45f3f79 src/main.c: simplify execv() call Michael Vogt 2015-04-21 09:44:52 +02:00
  • ffd19a9bd4 fix TOCTOU issue in mkdir of the cgroups Michael Vogt 2015-04-21 09:30:36 +02:00
  • 01a04e4c6c drop PR_SET_NO_NEW_PRIVS as it will break anything that needs to do a apparmor profile transition (like docker) Michael Vogt 2015-04-21 09:27:41 +02:00
  • fde49562e5 improve snprintf() error checking and move into a helper must_snprintf() Michael Vogt 2015-04-21 09:26:11 +02:00
  • a0b4612c51 src/main.c: simplify and call setgroups() Michael Vogt 2015-04-21 09:15:37 +02:00
  • 0dab8dd331 revert r25 and make missing seccomp profiles fatal again Michael Vogt 2015-04-21 09:13:19 +02:00
  • 6f159172fb src/main.c: always do aa_change_onexec but do not fail hard profile is missing and we run inside our tests Michael Vogt 2015-04-21 09:09:55 +02:00
  • 01ee2c60d3 add missing appname input filtering (thanks to Tyler Hicks) Michael Vogt 2015-04-21 08:59:57 +02:00
  • a8b1f79625 releasing package ubuntu-core-launcher version 0.2.3 0.2.3 Michael Vogt 2015-04-21 08:58:49 +02:00
  • d1b70128d8 debian/control: add missing ubuntu-core-security-utils dependency Michael Vogt 2015-04-21 08:25:09 +02:00
  • a1096e179c debian/control: update dependencies to include ubuntu-core-security-seccomp Michael Vogt 2015-04-21 08:16:41 +02:00
  • 48b5af1f8d Initial version for blocking oem snaps divergences Sergio Schvezov 2015-04-21 00:42:15 -03:00
  • 6931abef87 Warn if 'snappy build' is unable to perform a review on the generated .snap. by jamesodhunt approved by mvo James Hunt 2015-04-20 21:51:58 -04:00
  • 6b769b483e Make installing a framework restarting dependent apps services failing revert the installation, restarting dependent apps services. by chipaca approved by sergiusens John R. Lenton 2015-04-20 21:42:04 -04:00
  • 784c89d551 added tests for install aftereffects John R. Lenton 2015-04-21 02:32:09 +01:00
  • f05024957b blargh, scoping is hard John R. Lenton 2015-04-21 02:07:04 +01:00
  • 12c6c30e98 merged trunk John R. Lenton 2015-04-21 01:41:51 +01:00
  • ad12981366 Moving oem related tasks to an oem.go unit and adding support for Uninstall prevention of builtins. by sergiusens approved by chipaca Sergio Schvezov 2015-04-20 20:12:07 -04:00
  • e46935d968 spurious printf John R. Lenton 2015-04-21 01:01:12 +01:00
  • c37004c972 Make installing a framework restarting dependent apps services failing revert the installation, restarting dependent apps services. John R. Lenton 2015-04-21 00:56:54 +01:00
  • c4cc7d2f30 Adding doc for Software and Store Sergio Schvezov 2015-04-20 20:56:28 -03:00
  • 67a22a5fce Uninstall builtin test Sergio Schvezov 2015-04-20 18:33:50 -03:00
  • e6d70f9c12 Minimal oem tests Sergio Schvezov 2015-04-20 18:04:42 -03:00
  • ad000b23ae implement seccomp policy generation by mvo approved by chipaca Jamie Dev 2015-04-20 17:02:33 -04:00
  • 1495066f64 remove overlay.{c,h} - its unused right now Michael Vogt 2015-04-20 22:35:53 +02:00
  • f5f61c3ba5 merged lp:snappy Michael Vogt 2015-04-20 21:26:04 +02:00
  • 19b4f07b66 extract common add/remove policy code Michael Vogt 2015-04-20 21:14:55 +02:00
  • 9084561d4f address review comments Michael Vogt 2015-04-20 21:06:56 +02:00
  • cd404b15e6 improve removal test Michael Vogt 2015-04-20 20:58:55 +02:00
  • 7643318518 remove unneeded []byte() cast Michael Vogt 2015-04-20 20:42:33 +02:00
  • 3845e38ed3 make {add,remove}SecurityPolicy() part of the packageYaml struct and add tests Michael Vogt 2015-04-20 20:40:29 +02:00
  • 63ae0e87ce Mergin' trunk Sergio Schvezov 2015-04-20 15:19:18 -03:00
  • e46ce9f5e1 fix purge test Michael Vogt 2015-04-20 19:20:05 +02:00
  • 83e1e37a86 merged lp:~jdstrand/snappy/snappy.seccomp Michael Vogt 2015-04-20 18:56:17 +02:00
  • 973099bc8d merged lp:~jdstrand/snappy/snappy.seccomp Michael Vogt 2015-04-20 18:55:57 +02:00
  • a40adc3f2a implement systemd.Kill; use it from removePackageServices to not error out on systemctl stop. by chipaca approved by mvo John R. Lenton 2015-04-20 12:53:43 -04:00
  • 9d783d3ab8 Use the ubuntu-core-launcher when starting apps and services. by mvo approved by mvo,chipaca Michael Vogt 2015-04-20 12:52:00 -04:00
  • d58b3c67e6 merge with trunk Jamie Dev 2015-04-20 11:51:29 -05:00
  • d9af811149 updated tests for changes in purge John R. Lenton 2015-04-20 17:47:06 +01:00
  • bcf336e040 update tests Michael Vogt 2015-04-20 18:34:51 +02:00
  • 09bd15b3e9 Merged purge into kill. John R. Lenton 2015-04-20 17:31:56 +01:00
  • f41e4c9b39 Merged repodatadirs into purge. John R. Lenton 2015-04-20 17:31:53 +01:00
  • 146affa4b5 merged lp:snappy Michael Vogt 2015-04-20 18:28:36 +02:00
  • d32e84b549 snappy/security.go: make sure policy-vendor and policy-version can always be specified together Jamie Dev 2015-04-20 11:21:47 -05:00
  • 0b37aa5b7d Implements the OEM hardware assign to udev rules generation. by mvo approved by pitti Michael Vogt 2015-04-20 12:04:12 -04:00
  • d656c75bb0 snappy/security.go: - lint cleanups - redo API cleanup - removed unused function Jamie Dev 2015-04-20 10:57:57 -05:00
  • bfeb14173f Locking down remove if part of the oem builtins. Sergio Schvezov 2015-04-20 12:54:08 -03:00
  • 254978327c snappy purge. by chipaca approved by mvo John R. Lenton 2015-04-20 11:52:02 -04:00
  • b8b1685cfe merge from lp:~mvo/snappy/snappy.seccomp Jamie Dev 2015-04-20 10:50:59 -05:00
  • af46ce28b3 make tests work again, needs more work Michael Vogt 2015-04-20 17:47:41 +02:00
  • 035934481e merged lp:~jdstrand/snappy/snappy.seccomp Michael Vogt 2015-04-20 17:41:37 +02:00
  • 6c06c46adc Merged purge into kill. John R. Lenton 2015-04-20 16:37:47 +01:00
  • 1ad8d07759 Merged repodatadirs into purge. John R. Lenton 2015-04-20 16:37:46 +01:00
  • ddf60cfd7c various cleanups Jamie Dev 2015-04-20 10:34:27 -05:00
  • 59b2169fb9 instead of stopping and then starting dependent services, use (un)setActive John R. Lenton 2015-04-20 16:30:11 +01:00
  • e89a05b852 Introducing the DataDir datastructure, and a couple of methods around it. by chipaca approved by mvo John R. Lenton 2015-04-20 10:32:18 -04:00
  • a5305a1e30 * Sync with lp:snappy. James Hunt 2015-04-20 14:58:32 +01:00
  • 2b6c1a9910 * snappy/systemimage_test.go: Removed original sideload tests. * snappy/provisioning_test.go: Added new sideload tests. James Hunt 2015-04-20 14:55:30 +01:00
  • 7d766f8f5b Merged purge into kill. John R. Lenton 2015-04-20 14:24:33 +01:00
  • a14af8a155 Merged repodatadirs into purge. John R. Lenton 2015-04-20 14:24:28 +01:00
  • e877fc85df added a test with all kinds of mixed datadirs; added a comment about not using existing tools to find datadirs John R. Lenton 2015-04-20 14:01:02 +01:00
  • 3ebef54302 merged lp:snappy Michael Vogt 2015-04-20 14:55:45 +02:00
  • afa5f39760 address review comments, thanks a bunch John! Michael Vogt 2015-04-20 14:50:45 +02:00
  • 3239f17ceb simplify code by not passing the basedir to the ubuntu-core-launcher Michael Vogt 2015-04-20 14:43:41 +02:00
  • 22b42ac1bc remove rootdir as first argument as its redundant currently (the service/binary-wrapper will CD there and setup the environment) Michael Vogt 2015-04-20 14:38:18 +02:00
  • 05b32e221c wait 5 seconds, not just 2, for a unit to die John R. Lenton 2015-04-20 13:07:09 +01:00
  • 55d50f6e63 fix udevadm reload/trigger magic Michael Vogt 2015-04-20 13:31:37 +02:00
  • 7729bfbd71 * Warn if 'snappy build' is unable to perform a review on the generated .snap. Although the store will always perform such checks anyway, the user should be informed that the snap may not be usable for store uploads. James Hunt 2015-04-20 11:40:12 +01:00
  • 4279495237 using kill for fun and profit John R. Lenton 2015-04-20 11:26:13 +01:00
  • bae0f35767 add namespace to udev names Michael Vogt 2015-04-20 12:25:33 +02:00
  • 64e26dc3a4 rename app-id to part-id (thanks to Asac) Michael Vogt 2015-04-20 11:53:55 +02:00
  • ada6e49f2d run udevadm trigger after installing the udev rules Michael Vogt 2015-04-20 11:22:13 +02:00
  • a99a0fc5d0 kill John R. Lenton 2015-04-20 10:16:27 +01:00
  • 9e7cdc9b25 debian/control: add versionized dependency on ubuntu-core-launcher to ensure we get the version with the hwassign support Michael Vogt 2015-04-20 10:43:33 +02:00
  • b0f3f46f23 minimal README update for the devices cgroup feature Michael Vogt 2015-04-20 10:38:20 +02:00
  • 4847122bb6 continue even if no seccomp profile can be loaded to allow testing the new hwassign cgroup feature applied, to allow testing the new snappy hwassign feature Michael Vogt 2015-04-20 10:37:34 +02:00
  • 107543800b * add support for the snappy hwassign feature from the oem snap * continue in the launcher even if seccomp rules can not be applied, to allow testing the new snappy hwassign feature Michael Vogt 2015-04-20 10:25:55 +02:00
  • 37cde322f7 use ubuntu-core-launcher and generate hwassign name Michael Vogt 2015-04-20 10:08:27 +02:00
  • 6cc9a23625 merged trunk John R. Lenton 2015-04-20 05:28:53 +01:00
  • 15ed9f1786 cleanup John R. Lenton 2015-04-19 18:49:45 +01:00
  • 1fb49932db purge v0 John R. Lenton 2015-04-19 18:42:52 +01:00
  • 509474470e added Dirname to DataDir John R. Lenton 2015-04-19 17:03:24 +01:00
  • c7f1971335 move some of dirspec out of the loop and into the glob John R. Lenton 2015-04-19 16:51:59 +01:00
  • 8c62b1570c datadirs take a dirspec now John R. Lenton 2015-04-19 16:44:01 +01:00
  • b37de4d416 snappy/security.go: implement seccomp override Jamie Dev 2015-04-19 09:59:14 -05:00
  • bcb519431f snappy/dirs.go: use correct path for seccomp profiles Jamie Dev 2015-04-19 09:09:47 -05:00