Alex Murray

Hah ok, I am on the Ubuntu Security Team - I'll see if we can allocate a CVE for this.

Sure, the easiest way would be to create a separate repository that just contains the snapcraft build recipe which then points to the main git repo as the source -...

Closing and reopening to retrigger github actions.

Yes :) - I think I need to rebase it on master though so will try freshen it up again soon.

Updated to use the new 4.0.0 beta3 upstream release of apparmor and rebased on current snapd master.

There is at least one real spread test failure due to this PR - tests/main/snapd-homedirs-vendored - which downloads the current snapd snap, and repacks it with the contents of the...

@ernestl When is the deadline for 2.63? It is possible there will be a fixed version of apparmor before then.

@jslarraz unit tests appear to be failing: ``` FAIL: docker_support_test.go:291: DockerSupportInterfaceSuite.TestGenerateAAREExclusionPatterns ```

@zyga hey, any chance you or someone else from the snapd team can take a look at this one? Thanks!

The details above still don't necessarily convince me that this is working as expected - I think we really need to see the following: 1. install the snap without any...