[Touch-packages] [Bug 1869024] Re: add support for DynamicUser feature of systemd

2020-09-29 Thread Zygmunt Krynicki
I'm marking the snapd task as fix released, for 2.45 based on the history of the referenced pull request. ** Changed in: snapd Milestone: None => 2.45 ** Changed in: snapd Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu

Re: [Touch-packages] [Bug 1869024] Re: add support for DynamicUser feature of systemd

2020-04-13 Thread Simon Déziel
On 2020-04-11 9:04 p.m., Simon Déziel wrote: > On 2020-04-10 1:16 p.m., Jamie Strandboge wrote: >> The abstraction is meant to cover the client, not systemd internal >> specifics. A client simply accessing that DBus API won't need it and a >> client simply accessing those sockets won't need it. It

Re: [Touch-packages] [Bug 1869024] Re: add support for DynamicUser feature of systemd

2020-04-11 Thread Simon Déziel
On 2020-04-10 1:16 p.m., Jamie Strandboge wrote: > The abstraction is meant to cover the client, not systemd internal > specifics. A client simply accessing that DBus API won't need it and a > client simply accessing those sockets won't need it. It very well might > be that a profiled application

[Touch-packages] [Bug 1869024] Re: add support for DynamicUser feature of systemd

2020-04-10 Thread Jamie Strandboge
The abstraction is meant to cover the client, not systemd internal specifics. A client simply accessing that DBus API won't need it and a client simply accessing those sockets won't need it. It very well might be that a profiled application is using some *ctl command from systemd that would need

[Touch-packages] [Bug 1869024] Re: add support for DynamicUser feature of systemd

2020-04-09 Thread Simon Déziel
@jdstrand, asked in #systemd about @{PROC}/sys/kernel/random/boot_id and didn't get much information back. That said, https://github.com/systemd/systemd/blob/master/docs/RANDOM_SEEDS.md #systemds-use-of-random-numbers says: > At various places systemd needs random bytes for temporary file name

[Touch-packages] [Bug 1869024] Re: add support for DynamicUser feature of systemd

2020-04-07 Thread Launchpad Bug Tracker
This bug was fixed in the package apparmor - 2.13.3-7ubuntu4 --- apparmor (2.13.3-7ubuntu4) focal; urgency=medium * debian/apparmor.service: add /var/lib/snapd/apparmor/profiles to RequiresMountsFor since Ubuntu's rc.apparmor.functions looks for it (LP: #1871148) *

[Touch-packages] [Bug 1869024] Re: add support for DynamicUser feature of systemd

2020-04-06 Thread Jamie Strandboge
FYI, I added these accesses in https://github.com/snapcore/snapd/pull/8443 ** Also affects: snapd Importance: Undecided Status: New ** Changed in: snapd Status: New => In Progress ** Changed in: snapd Assignee: (unassigned) => Jamie Strandboge (jdstrand) -- You received

[Touch-packages] [Bug 1869024] Re: add support for DynamicUser feature of systemd

2020-04-06 Thread Jamie Strandboge
** Changed in: apparmor (Ubuntu) Status: New => Fix Committed ** Changed in: apparmor (Ubuntu) Status: Fix Committed => In Progress ** Changed in: apparmor (Ubuntu) Importance: Undecided => High ** Changed in: apparmor (Ubuntu) Assignee: (unassigned) => Jamie Strandboge

[Touch-packages] [Bug 1869024] Re: add support for DynamicUser feature of systemd

2020-03-25 Thread Simon Déziel
As mentioned in LP: #1796911 by xnox, some abstractions should be augmented with the corresponding dbus rules. Support for userdb should also be added IMHO. Here are the rules that were needed in my tests on an up to date Focal: # systemd DynamicUser /run/systemd/userdb/ r,