summaryrefslogtreecommitdiff
path: root/data
AgeCommit message (Expand)Author
2019-09-18data/selinux: allow snapd/snap to do statfs() on the cgroup mountpointMaciej Borzecki
2019-09-18data/selinux: allow snapd to issue sigkill to journalctlMaciej Borzecki
2019-08-14Merge pull request #7194 from jhenstridge/session-agent-use-preset-for-rpmsZygmunt Krynicki
2019-08-13data/selinux: tweak formatting of gen_require() blocksMaciej Borzecki
2019-08-13data/selinux: allow mandb_t to search /var/lib/snapdMaciej Borzecki
2019-08-12Merge pull request #7208 from chipaca/complete-validate-snap-betterJohn R. Lenton
2019-08-02cmd/snap, data/completion: improve completion for 'snap debug'John R. Lenton
2019-08-01data/selinux: compatibility with older policy revisionsMaciej Borzecki
2019-08-01packaging, data: make the sockets.targets.wants symlink local to deb packaging.James Henstridge
2019-07-31Merge remote-tracking branch 'upstream/master' into bboozzoo/selinux-nsfs-readMaciej Borzecki
2019-07-31data/selinux: update snapd and snap-mount-ns/snap-discard-ns profiles for nsfsMaciej Borzecki
2019-07-29data/selinux: allow read on sysfsMaciej Borzecki
2019-07-29data/selinux: allow snap-confine to read entries on nsfsMaciej Borzecki
2019-07-25Merge pull request #6954 from jhenstridge/user-session-agentMichael Vogt
2019-07-15selinux: add rules for bind mounting /lib/firmware/Michael Vogt
2019-07-11usersession/agent: rename socket to @pedronis's preferred nameJames Henstridge
2019-07-10Merge pull request #7043 from seb128/patch-1Michael Vogt
2019-07-09snap-userd-autostart: don't list as a startup application on the GUISebastien Bacher
2019-07-09sessionagent: rename socket to snapd.session-agent.socket to match unit nameJames Henstridge
2019-07-03cmd: rename "snap session-agent" command to "snap userd --agent"James Henstridge
2019-07-02Merge branch 'master' of github.com:snapcore/snapd into fix/base-migration-v2Zygmunt Krynicki
2019-06-25data/selinux: allow snap-confine to read symlinks on tmpfs_tMaciej Borzecki
2019-06-25cmd, data, packaging: some changes suggested by @zyga's reviewJames Henstridge
2019-06-25data: run snap session-agent as a systemd user session service.James Henstridge
2019-06-24data/selinux: allow snapd to cleanup socket files under $XDG_RUNTIME_DIRMaciej Borzecki
2019-06-10data/selinux: bump SELinux policy module versionMaciej Borzecki
2019-06-07data/selinux: allow running hooks and services from classic snapsMaciej Borzecki
2019-06-04data/selinux: permit init_t to remount snappy_snap_t (#6946)Maciej Borzecki
2019-05-21data/selinux: allow snap-confine to do search on snappy_var_t directoriesMaciej Borzecki
2019-05-02data: update XDG_DATA_DIRS via the systemd environment.d mechanism tooJames Henstridge
2019-04-26data/selinux: allow snap-confine to mount on top of bin_tMaciej Borzecki
2019-04-26data/selinux: auto transition /var/snap to snappy_var_tMaciej Borzecki
2019-04-18data/selinux: allow runuser keyring access, allow searching devptsMaciej Borzecki
2019-04-16data/selinux: remove unnecessary semicolonsMaciej Borzecki
2019-04-16data/selinux: allow snapd to execute runuserMaciej Borzecki
2019-04-12data/sysctl: tweak the comment about LXD specific settingsMaciej Borzecki
2019-04-12data/sysctl/rhel7-snap: tweak user.max_user_namespacesMaciej Borzecki
2019-04-11data/selinux: account for improved cwd handling in snap-confineMaciej Borzecki
2019-04-02data/selinux: final tweak to the policyMaciej Borzecki
2019-04-02data/selinux: more policy tweaksMaciej Borzecki
2019-04-02data/selinux: update the policyMaciej Borzecki
2019-03-28data/selinux: tune SELinux policyMaciej Borzecki
2019-03-28data/selinux: allow sys_admin for snap-confineMaciej Borzecki
2018-12-18Merge remote-tracking branch 'origin/master' into bboozzoo/selinux-policy-ref...Maciej Borzecki
2018-12-18data/selinux: update policyMaciej Borzecki
2018-12-13Merge pull request #6295 from mvo5/no-restartMichael Vogt
2018-12-13Merge remote-tracking branch 'origin/master' into bboozzoo/selinux-policy-ref...Maciej Borzecki
2018-12-12data/selinux: fix syntax error in definition of snappy_admin interfaceMaciej Borzecki
2018-12-12systemd: start snapd.autoimport.service in --no-block modeMichael Vogt
2018-12-10data/selinux: improve compatibiliy with older versions of core policyMaciej Borzecki