Files
Ian Johnson 2f4b0a4228 interfaces/docker-support: make generic rules not conflict with snap-confine
* interfaces/docker-support: make generic rules not conflict with snap-confine

The rules we inject into the profile to account for allowing devmode snaps to
execute other snaps are in conflict with these, meaning that the docker snap
(and the strictly confined microk8s snap) cannot be installed with devmode
confinement which sometimes needs to be done. So make these generic rules allow
anything except very specifically the transition rules which we inject that
have regular expression wildcards in them to get the policy to compile
properly.

Also adjust the spread test to ensure we are testing that the docker snap can
be installed with devmode, at least to the point where apparmor profiles are
compiled correctly.

Signed-off-by: Ian Johnson <ian.johnson@canonical.com>

* interfaces/docker-support: re-word comments for clarity

Signed-off-by: Ian Johnson <ian.johnson@canonical.com>

* interfaces/docker-support: add additional missing exclusion rules

Thanks to Alex for spotting these being missing.

Signed-off-by: Ian Johnson <ian.johnson@canonical.com>
2022-03-21 09:16:18 +01:00
..
2022-03-02 16:52:43 +01:00
2021-07-27 17:53:14 +08:00
2021-08-27 13:10:15 +02:00
2020-06-02 21:38:31 +00:00
2020-07-01 18:13:47 +00:00
2020-07-01 18:13:47 +00:00
2021-07-27 17:53:14 +08:00
2018-09-12 13:36:12 +02:00
2018-09-12 13:36:12 +02:00
2020-09-27 23:38:17 +02:00
2020-09-30 17:45:46 +01:00
2021-07-27 17:53:14 +08:00
2020-07-24 17:52:38 +00:00