interfaces/apparmor: add apparmor support code #635

Merged
merged 20 commits into from Mar 22, 2016
Commits
Jump to file or symbol
Failed to load files and symbols.
+6 −6
Split
Viewing a subset of changes. View all

interfaces/apparmor: use snap.* as mask

Signed-off-by: Zygmunt Krynicki <zygmunt.krynicki@canonical.com>
  • Loading branch information...
commit 939d1d5824c8ced1b7e994cf4f2f88ad289693ba @zyga zyga committed Mar 22, 2016
@@ -75,7 +75,7 @@ var profilesPath = realProfilesPath
// LoadedProfiles interrogates the kernel and returns a list of loaded apparmor profiles.
//
-// Snappy manages apparmor profiles named *.snap. Other profiles might exist on
+// Snappy manages apparmor profiles named "snap.*". Other profiles might exist on
// the system (via snappy dimension) and those are filtered-out.
func LoadedProfiles() ([]Profile, error) {
file, err := os.Open(profilesPath)
@@ -97,7 +97,7 @@ func LoadedProfiles() ([]Profile, error) {
return nil, err
}
mode = strings.Trim(mode, "()")
- if strings.HasSuffix(name, ".snap") {
+ if strings.HasPrefix(name, "snap.") {
profiles = append(profiles, Profile{Name: name, Mode: mode})
}
}
@@ -124,16 +124,16 @@ func (s *appArmorSuite) TestLoadedApparmorProfilesParsesAndFiltersData(c *C) {
/usr/lib/telepathy/telepathy-* (enforce)
/usr/lib/telepathy/telepathy-*//pxgsettings (enforce)
/usr/lib/telepathy/telepathy-*//sanitized_helper (enforce)
-pi2-piglow.background.snap (enforce)
-pi2-piglow.foreground.snap (enforce)
+snap.pi2-piglow.background (enforce)
+snap.pi2-piglow.foreground (enforce)
webbrowser-app (enforce)
webbrowser-app//oxide_helper (enforce)
`), 0600)
profiles, err := apparmor.LoadedProfiles()
c.Assert(err, IsNil)
c.Check(profiles, DeepEquals, []apparmor.Profile{
- {"pi2-piglow.background.snap", "enforce"},
- {"pi2-piglow.foreground.snap", "enforce"},
+ {"snap.pi2-piglow.background", "enforce"},
+ {"snap.pi2-piglow.foreground", "enforce"},
})
}