Commit Graph

  • 9d85bad70b tests/main/snap-confine-privs: fix the test to use tests.session helper Maciej Borzecki 2021-09-28 12:00:14 +02:00
  • f232a30107 spread: when tests fail, list any present cgroup v2 device filter maps Maciej Borzecki 2021-09-28 11:46:38 +02:00
  • d9d2e9e84a Merge branch 'master' into validation-sets/ignore-validation Paweł Stołowski 2021-09-28 09:49:34 +02:00
  • a8e8cd2506 cmd/libsnap-confine-private: require snap specific cgroup before setting up device control on v2 Maciej Borzecki 2021-09-28 09:41:22 +02:00
  • 8a60b8b3f3 Merge remote-tracking branch 'upstream/master' into bboozzoo/snap-confine-complain-about-wrong-cgroup Maciej Borzecki 2021-09-28 09:33:05 +02:00
  • 849507ff93 disks: useunix.BLKGETSIZE64 instead of unix.BLKGETSIZE (thanks to Ian) Michael Vogt 2021-09-28 09:03:32 +02:00
  • 6c0c6cfd57 interfaces/seccomp: add clone3 to default template Maciej Borzecki 2021-09-27 12:00:53 +02:00
  • d59c6ce1eb Merge pull request #10845 from bboozzoo/bboozzoo/allow-clone3-default-seccomp Michael Vogt 2021-09-28 08:52:05 +02:00
  • 41fae32d9f Merge pull request #10848 from oSoMoN/u2f-add-gotrust-idem-key Michael Vogt 2021-09-28 08:48:11 +02:00
  • 03dbb8b5a3 osutil/disks/disks_linux.go: fix doc-comments for clarity Ian Johnson 2021-09-27 15:29:32 -05:00
  • 4dec90eb9c osutil/disks: add DiskFromDevicePath, refactor udev helpers Ian Johnson 2021-09-27 15:19:55 -05:00
  • 9751127d99 osutil/disks/disks_linux_test.go: add more info in unexpected args output Ian Johnson 2021-09-27 15:17:10 -05:00
  • 7bf2ace734 osutil/disks: ensure that disk and MockDiskMapping implement Disk Ian Johnson 2021-09-27 12:04:18 -05:00
  • aa360302c5 interfaces/u2f-devices: add GoTrust Idem Key (https://launchpad.net/bugs/1945182) Olivier Tilloy 2021-09-27 18:33:40 +02:00
  • 0cbe764311 Merge pull request #10737 from stolowski/validation-sets/enforce-on-update Michael Vogt 2021-09-27 17:58:23 +02:00
  • d2b75a6d82 Merge pull request #10812 from MiguelPires/fix-disc-fail-on-hook Michael Vogt 2021-09-27 16:13:20 +02:00
  • 9362a63b66 Merge pull request #10833 from sergiocazzolato/tests-fix-core20-cloud-init-maas-signed-seed-data Sergio Cazzolato 2021-09-27 10:07:56 -03:00
  • 26e7e7f573 tests/main/snap-confine-undesired-mode-group: use tests.session helper Maciej Borzecki 2021-09-27 14:34:47 +02:00
  • cd6b1751b4 cmd/libsnap-confine-private: cgrupv2 die when process is not in snap specific group Maciej Borzecki 2021-09-27 14:29:54 +02:00
  • caf8d51ea2 cmd/snap-confine: drop misplaced comment Maciej Borzecki 2021-09-27 14:29:39 +02:00
  • 70a58a7136 Merge remote-tracking branch 'upstream/master' into tests-use-external-tools Sergio Cazzolato 2021-09-27 09:05:05 -03:00
  • e64a656b70 Merge pull request #10820 from mvo5/ice/check-encryption-no-longer-bool-2 Michael Vogt 2021-09-27 13:35:20 +02:00
  • b34b54b15f osutil: make disks.Size() only available on linux Michael Vogt 2021-09-27 13:08:59 +02:00
  • 999c2e61f0 interfaces/seccomp: add clone3 to default template Maciej Borzecki 2021-09-27 12:00:53 +02:00
  • 37a2b8de01 disks: add Size(path) helper Michael Vogt 2021-09-27 10:48:58 +02:00
  • 420e785432 secboot: run gofmt -s -w Michael Vogt 2021-09-27 09:27:32 +02:00
  • 63bb93636a Merge pull request #10826 from bboozzoo/bboozzoo/cgroupv2-test-and-systems-with-memlock-fix Michael Vogt 2021-09-27 09:23:34 +02:00
  • 2acabba321 Skip system-usernames-microk8s when TRUST_TEST_KEYS is false Sergio Cazzolato 2021-09-23 09:15:20 -03:00
  • 2a733ec973 Skip system-usernames-microk8s when TRUST_TEST_KEYS is false Michael Vogt 2021-09-27 09:22:16 +02:00
  • e4f16de415 interfaces/apparmor/template.go: allow inspection of dbus mediation level Ian Johnson 2021-09-24 09:08:32 -05:00
  • fcab70205a interfaces/dsp: add a usb rule to the ambarella flavor Ian Johnson 2021-09-24 09:00:39 -05:00
  • d27bd613f4 Merge pull request #10841 from anonymouse64/bugfix/dsp-ambarella-moar Michael Vogt 2021-09-27 09:18:48 +02:00
  • fdc277d19d Merge pull request #10842 from anonymouse64/feature/allow-inspection-dbus-restrictions Michael Vogt 2021-09-27 09:17:55 +02:00
  • b2c926d5cf Merge remote-tracking branch 'upstream/master' into ice/refactor-fde-minimal Michael Vogt 2021-09-25 20:09:06 +02:00
  • 0d2e49d8ea many: rename secboot.EncryptionTypeCryptsetup -> secboot.EncryptionTypeLUKS (thanks to Samuele) Michael Vogt 2021-09-25 20:07:41 +02:00
  • 598675f3af Merge remote-tracking branch 'upstream/master' into tests-fix-system-usernames-microk8s Sergio Cazzolato 2021-09-24 17:31:50 -03:00
  • 176cce5289 Merge remote-tracking branch 'upstream/master' into tests-fix-core20-cloud-init-maas-signed-seed-data Sergio Cazzolato 2021-09-24 17:31:23 -03:00
  • f83e4e6e31 Merge pull request #10840 from bboozzoo/bboozzoo/fix-security-device-cgroup-same-host Sergio Cazzolato 2021-09-24 17:27:58 -03:00
  • 70037c03bc Use snapstate.MockRevisionDate in the test to fix flakiness. Paweł Stołowski 2021-09-24 17:35:40 +02:00
  • aba059096d cmd/snap-confine: update s-c apparmor profile to allow versioned ld.so Maciej Borzecki 2021-09-24 12:24:24 +02:00
  • 19b68f7082 Merge pull request #10839 from bboozzoo/bboozzoo/snap-confine-ld-interpreter-change Michael Vogt 2021-09-24 16:15:24 +02:00
  • 8356a8cb69 interfaces/apparmor/template.go: allow inspection of dbus mediation level Ian Johnson 2021-09-24 09:08:32 -05:00
  • 3524f9484c interfaces/dsp: add a usb rule to the ambarella flavor Ian Johnson 2021-09-24 09:00:39 -05:00
  • b5639f5ca8 cmd/libsnap-confine-private: upcast to a single type Maciej Borzecki 2021-09-24 15:56:13 +02:00
  • e776195b8a tests/main/security-device-cgroups: fix when both variants run on the same host Maciej Borzecki 2021-09-24 14:47:32 +02:00
  • 4570677cc9 many: rename systemd.Kind to Backend for a bit more clarity (#10788) Samuele Pedroni 2021-09-24 14:09:05 +02:00
  • ace6f8b106 Merge branch 'master' into validation-sets/enforce-on-update Paweł Stołowski 2021-09-24 13:32:17 +02:00
  • c6ed0fcfe3 Add the comments Sergio Cazzolato 2021-09-24 08:09:42 -03:00
  • f2cacdac51 Merge pull request #10837 from bboozzoo/bboozzoo/clang-13-happy-again Michael Vogt 2021-09-24 13:08:15 +02:00
  • 55d4329364 Merge remote-tracking branch 'upstream/master' into tests-fix-core20-cloud-init-maas-signed-seed-data Sergio Cazzolato 2021-09-24 07:42:37 -03:00
  • a0f42540b0 Merge remote-tracking branch 'upstream/master' into tests-fix-system-usernames-microk8s Sergio Cazzolato 2021-09-24 07:41:20 -03:00
  • 6d77273188 cmd/snap-confine: update s-c apparmor profile to allow versioned ld.so Maciej Borzecki 2021-09-24 12:24:24 +02:00
  • 79620fa48a fde: improve error handling and doc strings for methods Michael Vogt 2021-09-24 10:02:54 +02:00
  • 242cf1f86c Merge remote-tracking branch 'upstream/master' into ice/fde-device-unlock Michael Vogt 2021-09-24 09:52:37 +02:00
  • 5eb43e73eb cmd/libsnap-confine-private: refactor rlimit manipulation for cgroup v2 Maciej Borzecki 2021-09-24 09:23:45 +02:00
  • 26299799ac Merge pull request #10834 from sergiocazzolato/test-fix-netplan-2 Michael Vogt 2021-09-24 09:32:38 +02:00
  • 5b73418b8a Merge pull request #10835 from sergiocazzolato/tests-fix-lxd-mount-unit Michael Vogt 2021-09-24 09:31:39 +02:00
  • 56993b58fa Merge pull request #10831 from mvo5/ice/linear-mapper Michael Vogt 2021-09-24 09:28:52 +02:00
  • 5178f4c349 Merge remote-tracking branch 'upstream/master' into bboozzoo/cgroupv2-test-and-systems-with-memlock-fix Maciej Borzecki 2021-09-24 09:03:05 +02:00
  • df22f375de cmd/libsnap-confine-private: fix set but unsed variable in the unit tests Maciej Borzecki 2021-09-24 08:10:25 +02:00
  • 97c5d9cd6f Merge remote-tracking branch 'upstream/master' into themes-api-access-check James Henstridge 2021-09-24 12:59:56 +08:00
  • e7edd48a73 interfaces: add support for associating multiple polkit policy files with the interface James Henstridge 2021-09-24 12:58:45 +08:00
  • 359ed1d642 snap/snapenv: set XDG_*_HOME if using ~/.snap Miguel Pires 2021-09-22 18:58:36 +01:00
  • a4b0f128e0 many: add .snap to apparmor profile Miguel Pires 2021-09-22 16:12:47 +01:00
  • 2c4d18eaf4 many: enable ~/.snap experimental feature Miguel Pires 2021-09-22 13:24:04 +01:00
  • dfa3de32aa Merge remote-tracking branch 'upstream/master' into tests-use-external-tools Sergio Cazzolato 2021-09-23 16:49:50 -03:00
  • 1a1894ac25 Adding more space to ubuntu focal to aovid out of space error Sergio Cazzolato 2021-09-23 15:29:05 -03:00
  • 00de330957 disks: add TestCreateLinearMapperHappyWithUUID test Michael Vogt 2021-09-23 18:01:30 +02:00
  • 4c62219ffb disks: add TODO (thanks to Ian) Michael Vogt 2021-09-23 17:42:23 +02:00
  • 7b7cef5b1a Merge pull request #7700 from zyga/wip/raa-ux Michael Vogt 2021-09-23 17:38:23 +02:00
  • d05bc72989 Fix lxd-mount-units test which is based on core20 in focal system Sergio Cazzolato 2021-09-23 12:02:30 -03:00
  • 3ea1c4daca disks: the caller is expected to pass in the size that is not further changed Michael Vogt 2021-09-23 16:56:59 +02:00
  • 833d7f40fd Merge pull request #10828 from sergiocazzolato/tests-cleanup-selfhosted-workspace Michael Vogt 2021-09-23 16:50:28 +02:00
  • 1b815977f8 Merge pull request #10829 from sergiocazzolato/tests-update-impish-image Michael Vogt 2021-09-23 16:47:47 +02:00
  • 5b7c6d7527 Fix netplan test on i386 architecture Sergio Cazzolato 2021-09-23 11:40:26 -03:00
  • 62365cf72a disks: rename CreateLinearMapper->CreateLinearMapperDevice Michael Vogt 2021-09-23 16:33:11 +02:00
  • 5293feddd1 disks: use errorPrefix consistently (thanks to Alberto) Michael Vogt 2021-09-23 16:30:16 +02:00
  • 1a0ed2f528 Fix error trying to create the extra-snaps dir which already exists Sergio Cazzolato 2021-09-23 10:56:38 -03:00
  • 919126497a osutil/disks: move CreateLinearMapper() to the disks package Michael Vogt 2021-09-23 15:38:22 +02:00
  • 58dfcdd28d Merge branch 'master' into validation-sets/enforce-on-update Paweł Stołowski 2021-09-23 14:43:49 +02:00
  • 8030be8638 tests: update uc20-create-partitions test Michael Vogt 2021-09-23 14:25:17 +02:00
  • 08d1aede39 Skip system-usernames-microk8s when TRUST_TEST_KEYS is false Sergio Cazzolato 2021-09-23 09:15:20 -03:00
  • e2185291c5 Merge pull request #10630 from MiguelPires/install-update-prereq Michael Vogt 2021-09-23 14:00:54 +02:00
  • f334f9873d osutil: add new CreateLinearMapper helper Michael Vogt 2021-09-23 12:58:39 +02:00
  • 58376afc6d Merge branch 'master' into validation-sets/enforce-on-update Paweł Stołowski 2021-09-23 11:49:13 +02:00
  • ce0099adf2 gadget: add encryptedDevice interface and add encryptedDeviceLUKS Michael Vogt 2021-09-23 09:50:54 +02:00
  • 78736d91d7 Merge pull request #10810 from stolowski/validation-sets/update-vsets-asserts-only-with-all-snaps Michael Vogt 2021-09-23 10:47:40 +02:00
  • 3aa94fa7ff o/snapstate: update default provider if missing required content Miguel Pires 2021-08-17 14:16:43 +01:00
  • c3ac482011 Merge pull request #10815 from mvo5/ice/has-device-unlock Michael Vogt 2021-09-23 09:53:41 +02:00
  • 63d411938c Tweak waitInhibitUnlock (added a comment explaining how it works, use return instead of breaking from the loop for better readability) (thanks anonymouse64) Paweł Stołowski 2021-09-23 09:51:29 +02:00
  • 2bdaf1b092 Merge pull request #10715 from xnox/bump-secboot Michael Vogt 2021-09-23 09:32:12 +02:00
  • a778c8f160 o/ifacestate: don't lose connections if snaps are broken Pawel Stolowski 2021-09-23 09:29:42 +02:00
  • e038fc68a5 o/ifacestate: don't lose connections if snaps are broken Pawel Stolowski 2021-09-23 09:29:42 +02:00
  • 508c5dd262 Merge branch 'master' into wip/raa-ux Paweł Stołowski 2021-09-23 09:21:56 +02:00
  • 73e43db495 fde: fix typos Michael Vogt 2021-09-23 09:21:24 +02:00
  • 1df5a997a8 Merge pull request #10822 from bboozzoo/bboozzoo/try-debug-failing-mknod Michael Vogt 2021-09-23 09:19:00 +02:00
  • d51de3a547 Merge pull request #10823 from mvo5/feature/cloud-init-grade-signed-filtered-tmpfiles Michael Vogt 2021-09-23 09:18:15 +02:00
  • 254cca93c8 Merge branch 'polkit-iface-backend' into polkit-iface James Henstridge 2021-09-23 14:27:55 +08:00
  • 17f6e535c8 Merge remote-tracking branch 'upstream/master' into polkit-iface-backend James Henstridge 2021-09-23 14:26:34 +08:00
  • d8bd3f3753 Remove ubuntu-21.10-64-cgroupv2 from tests workflow Sergio Cazzolato 2021-09-22 18:35:50 -03:00