lp://qastaging/~kyrofa/snap-confine/create_user_common_data

Branch merges

Propose for merging

No branches dependent on this one.

Ready for review for merging into lp://qastaging/~snappy-dev/snap-confine/trunk

Snappy Developers: Pending requested 2016-05-02

Diff: 292 lines (+140/-46)

2 files modified

src/main.c (+41/-6)
tests/test_create_user_data (+99/-40)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #1559248: Support unversioned data directory (i.e. data shared between versions)

Undecided

Invalid

Link a bug report

Related blueprints

136. By Kyle Fazzari on 2016-05-02

Should use calloc instead of malloc to zero-init string.

135. By Kyle Fazzari on 2016-05-02

Create user-specific common snap data directory.

The newest version of Snappy now supports a unversioned ("common") snap data
directory for both system-wide and user-specific data. Since the launcher
currently creates the other user-specific data, it makes sense to include
the user-specific common data as well.

134. By Jamie Strandboge on 2016-04-29

* SECURITY UPDATE: delayed attack snap data theft and privilege escalation
  when using Snappy on traditional Ubuntu (classic) systems (LP: #1576699)
  - src/main.c: remove glob code and hardcode /snap/ubuntu-core/current
    instead. The glob code both used an improper glob and performed an
    incorrect check due to a typo which allowed a snap named ubuntu-core-...
    to be bind mounted into application runtimes instead of the ubuntu-core
    OS snap. Ubuntu Core removed .<origin> and .sideload from the SNAP path
    so the glob can simply be dropped.
  - CVE-2016-1580
* debian/usr.bin.ubuntu-core-launcher:
  - only allow mounting /snap/ubuntu-core/*/... to safeguard against this in
    the future
  - add lib32 and libx32 to match setup_snappy_os_mounts()

133. By Jamie Strandboge on 2016-04-15

release 1.0.27

132. By Jamie Strandboge on 2016-04-15

- make whitelist_re strictly follow the 16.04 specification and adjust
  testsuite accordingly

131. By Jamie Strandboge on 2016-04-15

src/main.c: don't prepend snap. or snap_ since snapd is doing that for us
now (LP: #1571048)

130. By Jamie Strandboge on 2016-04-15

release 1.0.26

129. By Jamie Strandboge on 2016-04-15

src/main.c: allow caps in appname (LP: #1570914)

128. By Michael Vogt on 2016-04-15

releasing package ubuntu-core-launcher version 1.0.25.1

127. By Michael Vogt on 2016-04-15

check for both src and dst mount points when doing the
ubuntu-core overlay mounts (LP: #1570712)