Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
Already on GitHub? Sign in to your account
many: add support for /home on NFS #3958
Merged
Commits
Show all changes
62 commits
Select commit
Hold shift + click to select a range
ba66b33
interfaces: allow backends to initialize
zyga 7fb3a53
overlord/ifacestate: initialize security backends on startup
zyga 7c0eb17
dirs: add directory representing local apparmor policy for snap-confine
zyga a80ca10
interfaces/apparmor: add apparmor snippet for systems using NFS
zyga 754d855
interfaces/apparmor: generate local policy for snap-confine if using NFS
zyga c468d71
interfaces/apparmor: log presence of extra NFS permissions
zyga 68b079e
interfaces/apparmor: inject NFS snippet if anything uses NFS
zyga 4da42a4
interfaces/apparmor: treat nfs and nfs4 the same way
zyga bf9cfb4
interfaces/apparmor: constrain NSF support to /home
zyga 364119f
interfaces/apparmor: add a TODO
zyga 511b4c4
interfaces/apparmor: don't load s-c profile if reexecing
zyga 8bd50ea
interfaces/apparmor: make AnythingUsesNfs testable and test it
zyga 333b1a6
interfaces/apparmor: mock away potential NFS influence during testing
zyga 52d58a6
interfaces/apparmor: rename anythingUsesNfs to isHomeUsingNFS
zyga e3ea565
interfaces/apparmor: make setupSnapConfineGeneratedPolicy testable
zyga b758ce3
interfaces/apparmor: create local policy directory if missing
zyga ae7706a
interfaces/apparmor: add tests for SetupSnapConfineGeneratedPolicy
zyga 432d69f
interfaces/apparmor: create policy directory earlier
zyga faf65e2
interfaces/apparmor: add more unit tests
zyga e9225ce
interfaces/apparmor: add tests for Backend.Intialize
zyga c81b279
interfaces/apparmor: skip one test running as root
zyga c3ecaae
interfaces/apparmor: detect potentially mounted NFS via fstab
zyga cc53deb
interfaces/apparmor: re-factor NFS tests for brevity
zyga f629ea9
Merge branch 'master' of github.com:snapcore/snapd into feature/nfs-s…
zyga d2b5274
Merge branch 'master' of github.com:snapcore/snapd into feature/nfs-s…
zyga 54a9030
tests: add spread test for NFS mounted home
zyga 1617235
interfaces/apparmor: correct NFS-on-/home check
zyga 56aaca9
tests: use rot13 to hide program from spellchecker
zyga af0fbeb
interfaces/apparmor: use dirs.SnapConfineAppArmorDir directly
zyga 1cbf3a0
interfaces/apparmor: don't fail if we cannot determine NFS status
zyga f246b69
tests: test various combinations of NFS: NFS{v3-tcp,v3-udp,v4}
zyga 0ce764c
interfaces/apparmor: include real filename in error message
zyga 92acccc
interfaces/apparmor: include real filename in error message
zyga 633738b
interfaces/apparmor: revise TODO comment into a NOTE
zyga ffd6ae9
interfaces/apparmor: fix typo
zyga b7e32b0
interfaces/apparmor: use -O no-expr-simplify
zyga 8897409
interfaces/apparmor: include real filename in error message
zyga 75282b4
interfaces/apparmor: add comment about why NFS workaround is needed
zyga 141d4a3
interfaces/apparmor: expand and document NFS tests
zyga 2a1269b
interfaces/apparmor: use more explicit mock helpers
zyga 8df1e9f
interfaces/apparmor: remove generated policy if loading fails
zyga f7adbe8
tests: fix typo "we"
zyga 3266327
interfaces/apparmor: handle both .real and plain profiles
zyga bfca7a2
Merge branch 'master' of github.com:snapcore/snapd into feature/nfs-s…
zyga fbd79a0
Merge branch 'master' of github.com:snapcore/snapd into feature/nfs-s…
zyga 7a31a1b
interfaces/apparmor: don't generate policy if /proc/self/exe is broken
zyga 4c80cc3
Merge branch 'master' of github.com:snapcore/snapd into feature/nfs-s…
zyga a2e8af4
tests: use .orig instead of .bak
zyga 9cb6fb8
tests: fix typo exits -> exists
zyga cf80928
overlord/ifacestate: restore original method name
zyga dd051dd
interfaces/apparmor: refer to NFS non-transparency bug
zyga e9eefae
interfaces/apparmor: add safety check to MockEtcFstab
zyga 08a1b71
interfaces/apparmor: separate errors with a colon
zyga 71858c8
interfaces/apparmor: fix incorrect copy/pasted code
zyga 81b5d12
interfaces/apparmor: tweak spacing of test code
zyga 28131f5
interfaces/apparmor: tweak comment for clarity
zyga d52aa5e
interfaces/apparmor: move definition to common var block
zyga 84387f4
interfaces/apparmor: separate errors with a colon
zyga 504eb6b
interfaces/apparmor: remove indirection and test Initialize directly
zyga 7fb4469
tests: add "exportfs" to known words and remove the spell hack
zyga fd5aff4
many: drop .d from /var/lib/snapd/apparmor/snap-confine.d
zyga 8107d45
interfaces/apparmor,tests: rename generated-nfs to nfs-support
zyga
Jump to file or symbol
Failed to load files and symbols.
Viewing a subset of changes. View all
tests: use rot13 to hide program from spellchecker
Our spell checker dislikes "exportfs" so ... use rot13 to hide the real name. /o\ Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
- Loading branch information...
commit 56aaca91a5d7e7aed076703186c729a3283d4c2c
zyga
committed
Oct 2, 2017
The package installations should happen at the global location next to every other package installation, and it doesn't have to be purged at restore time. Please coordinate with Sergio so that these packages also go into the image maintenance spread runs so that once we finally manage to cook packages into the images this will be there too.