FEDORA-2018-5d4624b7af — enhancement update for snapd and snapd-glib

stable

snapd-2.35-1.fc28 and snapd-glib-1.43-1.fc28

FEDORA-2018-5d4624b7af created by ngompa 7 years ago for Fedora 28

Updates to snapd-2.35 and snapd-glib-1.43.

snapd 2.35

Some highlights:

Support to build/seed core18 based images
Interface improvements: i2c (sysfs-name support)
Show verified publishers with a green check mark
Interface connection via gadget
Hardware watchdog on Ubuntu Core
New dvd interface
New {contacts,calendar}-service interfaces
Snapd selftest check on startup

snapd-glib 1.43

New API:
- snapd_client_get_snap_async
- snapd_client_get_snap_finish
- snapd_client_get_snap_sync
- snapd_client_get_snaps_async
- snapd_client_get_snaps_finish
- snapd_client_get_snap_sync
- snapd_snap_get_publisher_display_name
- snapd_snap_get_publisher_id
- snapd_snap_get_publisher_username
- snapd_snap_get_publisher_validation
- snapd_system_information_get_refresh_hold
- snapd_system_information_get_refresh_last
- snapd_system_information_get_refresh_next
- snapd_system_information_get_refresh_schedule
- snapd_system_information_get_refresh_timer
- snapd_system_information_get_sandbox_features
- SNAPD_ERROR_AUTH_CANCELLED
- SNAPD_FIND_FLAGS_SCOPE_WIDE
Deprecated API:
- snapd_client_list_async
- snapd_client_list_finish
- snapd_client_list_sync
Fix small memory leak
Fix compile warnings

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2018-5d4624b7af

This update has been submitted for testing by ngompa.

7 years ago

ngompa edited this update.

7 years ago

This update has been pushed to testing.

7 years ago

plaes commented & provided feedback 7 years ago

karma

Still get following AVC denials:

denied  { read write } for  pid=3472 comm="mount" name="loop-control" dev="devtmpfs" ino=1353 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=1
denied  { open } for  pid=3472 comm="mount" path="/dev/loop-control" dev="devtmpfs" ino=1353 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=1
denied  { ioctl } for  pid=3472 comm="mount" path="/dev/loop-control" dev="devtmpfs" ino=1353 ioctlcmd=0x4c82 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=1
denied  { read write } for  pid=3472 comm="mount" name="loop0" dev="devtmpfs" ino=25246 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
denied  { open } for  pid=3472 comm="mount" path="/dev/loop0" dev="devtmpfs" ino=25246 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
denied  { ioctl } for  pid=3472 comm="mount" path="/dev/loop0" dev="devtmpfs" ino=25246 ioctlcmd=0x4c00 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
denied  { mounton } for  pid=3472 comm="mount" path="/tmp/selftest-mountpoint-810244833" dev="tmpfs" ino=500922 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
denied  { getattr } for  pid=3478 comm="umount" name="/" dev="loop0" ino=2 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1

lobocode commented & provided feedback 7 years ago

karma

works

This update has been submitted for batched by bodhi.

7 years ago

This update has been submitted for stable by bodhi.

7 years ago

This update has been pushed to stable.

7 years ago

Please log in to add feedback.

Metadata

Type

enhancement

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

modified

7 years ago

Builds

snapd-2.35-1.fc28

snapd-glib-1.43-1.fc28

BZ#1558850 SELinux is preventing systemd from 'getattr' accesses on the lnk_file /var/lib/snapd/snap/core/current.

BZ#1559253 SELinux is preventing ssh-keygen from 'map' accesses on the Datei /usr/bin/ssh-keygen.

BZ#1562496 SELinux is preventing snapd from 'getattr' accesses on the file /usr/bin/ssh-keygen.

BZ#1567626 SELinux is preventing snap-seccomp from 'open' accesses on the file /var/lib/sss/mc/passwd.

BZ#1567933 SELinux is preventing snapd from 'map' accesses on the Datei /var/cache/snapd/commands.db.

BZ#1572713 SELinux is preventing ssh-keygen from 'getattr' accesses on the plik /etc/passwd.

BZ#1572714 SELinux is preventing ssh-keygen from 'open' accesses on the plik /etc/passwd.

BZ#1572715 SELinux is preventing ssh-keygen from 'read' accesses on the plik /etc/passwd.

BZ#1598946 snapd-2.35 is available

BZ#1610781 snapd-glib-1.43 is available

snapd-2.35-1.fc28

snapd-glib-1.43-1.fc28

Automated Test Results

ignored