Maciej Borzecki a5c108da18 interfaces/apparmor: allow snap-update-ns to access /sys/devices/system/cpu/online ...

Glibc 2.27 may try to access this file when creating a new arena for malloc.
This happens when glibc calls __get_nprocs() behind the scenes, and
/sys/devices/systen/cpu/online is the first of the files on which open() is
attempted.

Putting this in Go context, with details outlined in
https://github.com/golang/go/issues/25628, the problem was only seed on i386
systems when binaries are built using cgo. It just so happens that
snap-update-ns needs to be built with cgo and linked statically with glibc.

Signed-off-by: Maciej Borzecki <maciej.zenon.borzecki@canonical.com>

2021-07-06 07:41:27 +02:00

..

apparmor_test.go

interfaces/apparmor: compatibility fix with apparmor 2.x

2021-05-27 13:56:04 +02:00

apparmor.go

interfaces/apparmor: simplify further

2021-05-27 14:04:22 +02:00

backend_test.go

interfaces/apparmor: remove unused mock

2021-05-12 09:47:00 +03:00

backend.go

interfaces/apparmor: followup cleanups, comments and tweaks

2021-03-29 10:04:58 +02:00

export_test.go

Remove apparmor downgrade feature

2021-02-15 17:14:41 +00:00

spec_test.go

asserts,interfaces,snap: fix imports order (according to gci)

2021-06-14 20:54:41 +02:00

spec.go

interfaces/apparmor: drive by comment fix

2021-01-12 10:24:55 +01:00

template_vars.go

add SNAP_INSTANCE_DESKTOP template var and use it

2020-08-14 20:44:24 +00:00

template.go

interfaces/apparmor: allow snap-update-ns to access /sys/devices/system/cpu/online

2021-07-06 07:41:27 +02:00