mirror of
https://github.com/token2/snapd.git
synced 2026-03-13 11:15:47 -07:00
2f4b0a4228
* interfaces/docker-support: make generic rules not conflict with snap-confine The rules we inject into the profile to account for allowing devmode snaps to execute other snaps are in conflict with these, meaning that the docker snap (and the strictly confined microk8s snap) cannot be installed with devmode confinement which sometimes needs to be done. So make these generic rules allow anything except very specifically the transition rules which we inject that have regular expression wildcards in them to get the policy to compile properly. Also adjust the spread test to ensure we are testing that the docker snap can be installed with devmode, at least to the point where apparmor profiles are compiled correctly. Signed-off-by: Ian Johnson <ian.johnson@canonical.com> * interfaces/docker-support: re-word comments for clarity Signed-off-by: Ian Johnson <ian.johnson@canonical.com> * interfaces/docker-support: add additional missing exclusion rules Thanks to Alex for spotting these being missing. Signed-off-by: Ian Johnson <ian.johnson@canonical.com>