← Back to team overview

group.of.nepali.translators team mailing list archive

[Bug 1569581] Re: snapd no longer detects apparmor changes on upgrade

 

Ok, I've added an apparmor task and assigned to me. Leaving the snappy
tasks open for "we will re-load all profiles for a specific snap each
time something in that snap changes *AND* we promise to detect changes
to the internal templates built into snappy" where I understand the
first part is done but the changes to internal templates is not.
Assigning zyga for the time being-- please adjust as necessary.

** Also affects: apparmor (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: snapd (Ubuntu)
       Status: New => Triaged

** Changed in: snapd (Ubuntu Xenial)
       Status: New => Triaged

** Changed in: apparmor (Ubuntu)
     Assignee: (unassigned) => Jamie Strandboge (jdstrand)

** Changed in: apparmor (Ubuntu Xenial)
     Assignee: (unassigned) => Jamie Strandboge (jdstrand)

** Changed in: apparmor (Ubuntu)
       Status: New => Triaged

** Changed in: apparmor (Ubuntu Xenial)
       Status: New => Triaged

** Changed in: snappy
     Assignee: (unassigned) => Zygmunt Krynicki (zyga)

** Changed in: apparmor (Ubuntu)
   Importance: Undecided => High

** Changed in: apparmor (Ubuntu Xenial)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1569581

Title:
  snapd no longer detects apparmor changes on upgrade

Status in Snappy:
  Triaged
Status in apparmor package in Ubuntu:
  Triaged
Status in snapd package in Ubuntu:
  Triaged
Status in apparmor source package in Xenial:
  Triaged
Status in snapd source package in Xenial:
  Triaged

Bug description:
  snappy in 16.04 used to compare /usr/share/snappy/security-policy-
  version and /var/lib/snappy/security-policy-version on boot to see if
  the apparmor package changed and therefore if it needed to regenerate
  all snap policy. This functionality was recently removed with nothing
  added to replace it.

  snapd must have a means to detect changes to the parser or the
  abstractions which the snap may #include, otherwise we cannot deliver
  parser and policy fixes from apparmor to installed snaps. It is fine
  to use a different method than what we had before, but we need to have
  something.

To manage notifications about this bug go to:
https://bugs.launchpad.net/snappy/+bug/1569581/+subscriptions