mirror of
https://github.com/token2/snapd.git
synced 2026-03-13 11:15:47 -07:00
ce35eaf151
* interfaces: add pkcs11 interface Signed-off-by: Ondrej Kubik <ondrej.kubik@canonical.com> * interfaces: pkcs11: make slot super-privileged, while plug is not Signed-off-by: Ondrej Kubik <ondrej.kubik@canonical.com> * interfaces: pkcs11: for now, pkcs11 slot side is not provided by the system Signed-off-by: Ondrej Kubik <ondrej.kubik@canonical.com> * interfaces: pkcs11: improve socket path validation against apparmor regexp Signed-off-by: Ondrej Kubik <ondrej.kubik@canonical.com> * interfaces: pkcs11: pkcs11 slot side is not provided by the system Signed-off-by: Ondrej Kubik <ondrej.kubik@canonical.com> * interfaces: pkcs11: ensure apparmor rules are safeguarded by quotes Signed-off-by: Ondrej Kubik <ondrej.kubik@canonical.com> * interfaces: pkcs11: remove deny-connection in slot declaration Signed-off-by: Ondrej Kubik <ondrej.kubik@canonical.com> * interfaces: pkcs11: update error message for missing socket attribute Signed-off-by: Ondrej Kubik <ondrej.kubik@canonical.com> * interfaces: pkcs11: add testcase for missing slot attribute Signed-off-by: Ondrej Kubik <ondrej.kubik@canonical.com> * interfaces: pkcs11: fix test assert for apparmor chars Signed-off-by: Ondrej <ondra@ondra.org> * interfaces: pkcs11: remove BaseDeclarationPlugs, it has default values Signed-off-by: Ondrej <ondra@ondra.org> * interfaces: pkcs11: move rearrange socket patch checks Signed-off-by: Ondrej <ondra@ondra.org> * interfaces: pkcs11: soften socket file name check to allow any socket file name Signed-off-by: Ondrej <ondra@ondra.org> * interfaces: pkcs11: improve test coverage Signed-off-by: Ondrej <ondra@ondra.org> * interfaces: pkcs11: fix typo in failing test Signed-off-by: Ondrej <ondra@ondra.org> * interfaces/builtin: test pkcs11 SecCompPermanentSlot * interfaces/builtin: pkcs11: clean up a bit errors plus add some comments * interfaces/builtin: pkcs11: add /usr/share/p11-kit/modules/ to connected plug Signed-off-by: Ondrej <ondra@ondra.org> Co-authored-by: Samuele Pedroni <pedronis@lucediurna.net>