Snap refresh causes various apparmor DENIED and weirdness

[Haw Loeung]

Hi,

chromium installed from the snap refreshed earlier this morning:

| refresh-date: today at 08:47 AEDT
| channels:
| stable: 79.0.3945.130 2020-01-27 (1005) 159MB -
| installed: 79.0.3945.130 (1005) 159MB -

Unfortunately, when it refreshed, it caused various weirdness - default blank tab not showing commonly visited sites, etc.

Looking into it, it seems to be related to a bunch of apparmor DENIED. Two of the important ones, I think which is causing what I was seeing is below:

| [180760.541231] audit: type=1400 audit(1580167457.220:12680): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name="/home/hloeung/snap/chromium/986/.config/chromium/Default/Cookies-journal" pid=12308 comm="ThreadPoolForeg" requested_mask="wc" denied_mask="wc" fsuid=3134 ouid=3134
| [180765.220924] audit: type=1400 audit(1580167461.900:12706): apparmor="DENIED" operation="truncate" profile="snap.chromium.chromium" name="/home/hloeung/snap/chromium/986/.config/chromium/Default/History-journal" pid=12278 comm="Chrome_HistoryT" requested_mask="w" denied_mask="w" fsuid=3134 ouid=3134

Where 986 was the previous snap release version and now 1005. Restarting chromium fixed this but it would be nice to not have to restart during my working day and being logged out of various places (cookie policy set to clear on quit).

[Haw Loeung (hloeung)]

Also lose any changes such as new tabs/sites opened or closed.

Maybe .config needs to move to ~/snap/chromium/common instead of being copied around between snap updates.

[Olivier Tilloy (osomon)]

The .config directory is in the correct place, it needs to be versioned because chromium doesn't guarantee backward compatibility in the format used to store its profile.

You've been hit by yet another instance of bug #1616650. I suggest enabling the experimental refresh app awareness option, see https://forum.snapcraft.io/t/wip-refresh-app-awareness/10736. This will prevent apps from being updated while they are running.

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.