Alex Murray 21ebc51f00 many: Use /tmp/snap-private-tmp for per-snap private tmps ...

To avoid unprivileged users being able to interfere with the creation of the
private snap mount namespace, instead of creating this as /tmp/snap.$SNAP_NAME/
we can now use the systemd-tmpfiles configuration to do this for us
at boot with a known fixed name (/tmp/snap-private-tmp/) and then use that as
the base dir for creating per-snap private tmp mount
namespaces (eg. /tmp/snap-private-tmp/snap.$SNAP_INSTANCE/tmp) etc.

Signed-off-by: Alex Murray <alex.murray@canonical.com>

2022-11-23 10:49:12 +10:30

..

apparmor

interfaces/apparmor: add permissions for per-snap directory on ubuntu-save partition

2022-07-13 09:16:47 +02:00

backends

interfaces: add polkit security backend to list of backends

2021-04-20 19:17:48 +08:00

builtin

many: Use /tmp/snap-private-tmp for per-snap private tmps

2022-11-23 10:49:12 +10:30

dbus

many: add stub services for prompting

2022-10-10 15:51:23 +02:00

hotplug

asserts,interfaces,snap: fix imports order (according to gci)

2021-06-14 20:54:41 +02:00

ifacetest

interfaces/apparmor: add missing unit tests for special devmode rules/behavior

2022-02-18 06:17:31 -06:00

kmod

i/kmod/kmod_test: simplify variable declaration

2022-06-23 18:08:10 +03:00

mount

interfaces: rework logic of unclashMountEntries (#12061)

2022-09-30 14:55:02 +02:00

policy

interfaces: Add microceph interface

2022-10-12 21:46:10 +02:00

polkit

interfaces/polkit: move test suite runner to backend_test.go

2021-10-08 13:31:11 +08:00

seccomp

interfaces: posix-mq: add new interface

2022-05-06 08:07:22 +02:00

systemd

systemd: fix snapd systemd-unit stop progress notifications (#11340)

2022-05-20 17:29:05 +02:00

udev

interfaces/udev: refactor handling of udevadm triggers for input

2022-04-18 17:24:04 +03:00

utils

interfaces/utils: introduce new PathPattern class

2021-12-08 09:48:58 +03:00

backend.go

interfaces: add extraLayouts to support additional mount entries

2022-04-22 09:24:15 +02:00

connection_test.go

many: add tests for attribute readers

2022-01-21 12:31:25 +03:00

connection.go

many: add helper function for type conversions

2022-01-14 12:12:50 +03:00

core_test.go

interfaces: get rid of . import of interfaces itself

2021-06-14 20:50:15 +02:00

core.go

Merge remote-tracking branch 'upstream/master' into polkit-iface-backend

2021-09-23 14:26:34 +08:00

export_test.go

many: add tests for attribute readers

2022-01-21 12:31:25 +03:00

helpers_test.go

Don't log errors from SetupMany helper - return them to the caller (regenerateSecurityProfiles) and log there.

2019-10-07 20:37:03 +02:00

helpers.go

Don't log errors from SetupMany helper - return them to the caller (regenerateSecurityProfiles) and log there.

2019-10-07 20:37:03 +02:00

naming_test.go

interfaces: make the service naming entirely internal to systemd BE

2021-07-09 18:47:12 +02:00

naming.go

interfaces: make the service naming entirely internal to systemd BE

2021-07-09 18:47:12 +02:00

repo_test.go

Fixes related to inclusive language.

2022-04-14 12:51:08 +02:00

repo.go

many: replace use of "sanity" with more inclusive naming

2022-03-16 09:10:59 +01:00

sorting_test.go

…

sorting.go

…

system_key_test.go

interfaces/system-key: in WriteSystemKey during tests, don't call ParserFeatures

2020-07-30 17:40:23 -05:00

system_key.go

many: replace some Validity with Precondition when appropriate (thanks to Samuele and Pawel)

2022-03-22 11:55:09 +01:00