diff -Nru snap-confine-1.0.43/debian/changelog snap-confine-1.0.43/debian/changelog
--- snap-confine-1.0.43/debian/changelog 2016-10-05 15:52:03.000000000 +0200
+++ snap-confine-1.0.43/debian/changelog 2016-10-06 16:47:14.000000000 +0200
@@ -1,3 +1,11 @@
+snap-confine (1.0.43-0ubuntu0.16.04+ppa2) xenial; urgency=medium
+
+ * snap-confine.postinst: update permissions on /var/lib/snapd/void after
+ installation to 0000
+ * debian/rules: don't "fix" permissions on /var/lib/snapd/void
+
+ -- Zygmunt Krynicki <zygmunt.krynicki@canonical.com> Thu, 06 Oct 2016 16:18:22 +0200
+
snap-confine (1.0.43-0ubuntu0.16.04+ppa1) xenial; urgency=medium
* New upstream release
diff -Nru snap-confine-1.0.43/debian/rules snap-confine-1.0.43/debian/rules
--- snap-confine-1.0.43/debian/rules 2016-09-12 14:08:27.000000000 +0200
+++ snap-confine-1.0.43/debian/rules 2016-10-06 16:41:05.000000000 +0200
@@ -22,7 +22,9 @@
./configure --prefix=/usr --libexecdir=/usr/lib/snapd $(VENDOR_ARGS)
override_dh_fixperms:
- dh_fixperms -Xusr/lib/snapd/snap-confine
+ dh_fixperms -Xusr/lib/snapd/snap-confine -Xvar/lib/snapd/void/
+ # XXX: why doesn't -X/var/lib/snapd/void/ above work?
+ chmod 0000 debian/snap-confine/var/lib/snapd/void
override_dh_installdeb:
dh_apparmor --profile-name=usr.lib.snapd.snap-confine -psnap-confine
diff -Nru snap-confine-1.0.43/debian/snap-confine.postinst snap-confine-1.0.43/debian/snap-confine.postinst
--- snap-confine-1.0.43/debian/snap-confine.postinst 1970-01-01 01:00:00.000000000 +0100
+++ snap-confine-1.0.43/debian/snap-confine.postinst 2016-10-06 16:45:36.000000000 +0200
@@ -0,0 +1,14 @@
+#!/bin/sh
+set -e
+
+#DEBHELPER#
+
+case $1 in
+ configure)
+ # Versions of this package earlier than 1.0.43-0ubuntu0.16.04+ppa2 did
+ # not set the permission of the void directory correctly. It seems
+ # that dpkg doesn't update permissions on existing directories. To
+ # counter that just change the permission directly after installation.
+ chmod 0000 /var/lib/snapd/void
+ ;;
+esac