-
snap-confine (1.0.44-0ubuntu1~16.10) yakkety; urgency=medium
* Backport from 17.04
* Add support for bidirectional mount event propagation in /media (LP: #1633273)
* Normal users can't run snaps inside of LXD containers (LP: #1630789)
* snap-confine should respond to --version (LP: #1633275)
* SNAP_CONFINE_DEBUG should not trigger on empty strings (LP: #1633276)
* Missing ptrace options needed by snap-confine (LP: #1633367)
-- Zygmunt Krynicki <email address hidden> Thu, 03 Nov 2016 13:02:00 +0100
-
snap-confine (1.0.43-0ubuntu1) yakkety; urgency=medium
* New upstream release (LP: #1630479, LP: #1630492, LP: #1628612)
* debian/patches/lp1630789.patch: allow running snaps by non-root users in
LXD containers (LP: #1630789)
-- Jamie Strandboge <email address hidden> Thu, 06 Oct 2016 12:29:59 +0000
-
snap-confine (1.0.42-0ubuntu3) yakkety; urgency=medium
* allow snap-confine to mount on /dev/pts/ptmx for LXD with /dev/ptmx
symlink
snap-confine (1.0.42-0ubuntu2) yakkety; urgency=medium
* add mmap to AppArmor policy for snap-confine for running snap-confine
under LXD on 4.8 kernels
-- Jamie Strandboge <email address hidden> Wed, 28 Sep 2016 17:04:05 -0500
-
snap-confine (1.0.42-0ubuntu1) yakkety; urgency=medium
* New upstream release
* Drop patch skip-nsfs-magic-tests-on-old-kernels.patch (applied upstream)
-- Zygmunt Krynicki <email address hidden> Mon, 26 Sep 2016 19:19:26 +0200
-
snap-confine (1.0.41-0ubuntu2) yakkety; urgency=medium
* add skip-nsfs-magic-tests-on-old-kernels.patch to disable NSFS tests on
kernels older than 3.19 (LP: #1625565)
-- Jamie Strandboge <email address hidden> Tue, 20 Sep 2016 10:58:54 -0500
-
snap-confine (1.0.41-0ubuntu1) yakkety; urgency=medium
* New upstream release, full list of issues is available at
https://launchpad.net/snap-confine/+milestone/1.0.41
* Drop all patches (included upstream).
* Add version to apparmor run-time dependency.
-- Michael Hudson-Doyle <email address hidden> Tue, 20 Sep 2016 20:45:24 +1200
-
snap-confine (1.0.40-0ubuntu1) yakkety; urgency=medium
* New upstream release, full list of issues is available at
https://launchpad.net/snap-confine/+milestone/1.0.40
* Drop apparmor profile from the debian/ directory and install it straight
from upstream package. This is now automatically consistent with package
configuration prefix.
* Drop patch: prctl-compatibility.patch(applied upstream)
* Add directory /var/lib/snapd/void to snap-confine
* Add patch: 0001-Don-t-shellcheck-files-spread-prepare-script.patch that
fixes make check due to a mistake upstream.
* Add patch: 0001-Stop-using-deprecated-readdir_r.patch (LP: #1615615)
-- Zygmunt Krynicki <email address hidden> Tue, 23 Aug 2016 10:53:16 +0200
-
snap-confine (1.0.39-1) unstable; urgency=medium
* New upstream release.
* Remove d/patches/01_lp1606277.patch, applied upstream.
-- Michael Hudson-Doyle <email address hidden> Tue, 16 Aug 2016 14:54:46 +1200
-
snap-confine (1.0.38-3) unstable; urgency=medium
* debian/patches/prctl-compatibility.patch: add shadow definitions for
compatibility with older kernel headers.
* drop build-dependency on shellcheck, which is not used at build time
and doesn't exist in trusty.
* make ubuntu-core-launcher "arch:any" to workaround an issue in
rm_conffile which does not deal with changing architectures
* fix log-observer interface regression (LP: #1606277)
-- Steve Langasek <email address hidden> Thu, 28 Jul 2016 21:00:38 +0000
-
snap-confine (1.0.38-2) unstable; urgency=medium
* Fix invocations of rm_conffile.
* Update d/usr.lib.snapd.snap-confine to the latest upstream version to
ensure content-sharing fully works.
-- Michael Hudson-Doyle <email address hidden> Fri, 22 Jul 2016 12:09:51 +1200
-
snap-confine (1.0.38-1) unstable; urgency=medium
* New upstream release.
-- Michael Hudson-Doyle <email address hidden> Wed, 20 Jul 2016 21:10:58 +1200
-
snap-confine (1.0.38-0ubuntu1) yakkety; urgency=medium
* New upstream release
-- Michael Vogt <email address hidden> Fri, 15 Jul 2016 16:07:07 +0200
-
snap-confine (1.0.37-0ubuntu1) yakkety; urgency=medium
* New upstream release.
-- Michael Vogt <email address hidden> Fri, 15 Jul 2016 14:57:11 +0200
-
snap-confine (1.0.36-1) unstable; urgency=medium
* New upstream release.
* Do not pass --enable-rootfs-is-core-snap to ./configure on Ubuntu.
* Only pass --enable-nvidia-ubuntu to ./configure on Ubuntu.
* Update apparmor profile to actually confine /usr/lib/snapd/snap-confine.
-- Michael Hudson-Doyle <email address hidden> Wed, 13 Jul 2016 11:12:39 +1200
-
snap-confine (1.0.35-1) unstable; urgency=medium
* New upstream release.
- use execle() with clean environment instead of execl() when calling
snappy-add-dev to avoid influencing snappy-add-dev and allowing privilege
escalation. snappy-app-dev is only called when devices are assigned via
udev tagging, but currently snapd does not create these udev tags during
'snap install' or 'snap connect' so this code branch is not entered during
app invocation.
-- Michael Hudson-Doyle <email address hidden> Thu, 07 Jul 2016 09:59:48 +1200
-
snap-confine (1.0.34-1) unstable; urgency=medium
[ Michael Hudson-Doyle ]
* New upstream release.
* Update build dependencies.
* Remove d/patches/udev-rules-without-confinement, applied upstream.
* Update apparmor profile.
* Change libexecdir from /usr/lib/snap-confine to /usr/lib/snapd.
* Install manpages.
* Add myself to uploaders.
[ Zygmunt Krynicki ]
* New upstream release
* Build with --disable-apparmor outside of Ubuntu (replaces
--disable-confinement from earlier releases)
-- Michael Hudson-Doyle <email address hidden> Mon, 04 Jul 2016 12:18:54 +1200
-
snap-confine (1.0.34) yakkety; urgency=medium
* new upstream release
-- Michael Vogt <email address hidden> Fri, 01 Jul 2016 13:22:16 +0200
