[snap] 80.0.3987.132 require new apparmor rules

Bug #1866369 reported by Simon Déziel
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
chromium-browser (Ubuntu)
New
Undecided
Unassigned

Bug Description

Since the snap upgrade to 80.0.3987.132, chromium keeps complaining about I/O errors that are apparently due to missing Apparmor rules. Here is what gets logged by "journalctl -f -o cat" when starting and closing chromium:

AVC apparmor="DENIED" operation="unlink" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F4C6173742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
AVC apparmor="DENIED" operation="rename_src" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F43757272656E742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="wd" denied_mask="wd" fsuid=1000 ouid=1000
audit: type=1400 audit(1583509664.429:3450): apparmor="DENIED" operation="unlink" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F4C6173742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
audit: type=1400 audit(1583509664.429:3451): apparmor="DENIED" operation="rename_src" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F43757272656E742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="wd" denied_mask="wd" fsuid=1000 ouid=1000
AVC apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F4C6173742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
AVC apparmor="DENIED" operation="unlink" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F43757272656E742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
AVC apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F43757272656E742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
audit: type=1400 audit(1583509664.433:3452): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F4C6173742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
audit: type=1400 audit(1583509664.433:3453): apparmor="DENIED" operation="unlink" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F43757272656E742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="d" denied_mask="d" fsuid=1000 ouid=1000
audit: type=1400 audit(1583509664.433:3454): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F43757272656E742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
[6794:6794:0306/104744.442966:ERROR:browser_main_loop.cc(277)] Gtk: gtk_icon_info_load_symbolic_for_context: assertion 'icon_info != NULL' failed
gdk_pixbuf_get_width: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
gdk_pixbuf_get_height: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
[6794:6794:0306/104744.443908:ERROR:browser_main_loop.cc(277)] Gtk: gtk_icon_info_load_symbolic_for_context: assertion 'icon_info != NULL' failed
gdk_pixbuf_get_width: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
gdk_pixbuf_get_height: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
[6794:6794:0306/104744.444452:ERROR:browser_main_loop.cc(277)] Gtk: gtk_icon_info_load_symbolic_for_context: assertion 'icon_info != NULL' failed
gdk_pixbuf_get_width: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
gdk_pixbuf_get_height: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
Opening in existing browser session.
AVC apparmor="DENIED" operation="truncate" profile="snap.chromium.chromium" name="/home/sdeziel/snap/chromium/1040/.config/chromium/Default/History-journal" pid=6794 comm="Chrome_HistoryT" requested_mask="w" denied_mask="w" fsuid=1000 ouid=1000
[6794:6937:0306/104744.470760:ERROR:database.cc(1584)] History sqlite error 1546, errno 0: disk I/O error, sql: SELECT segment_id, time_slot, visit_count FROM segment_usage WHERE time_slot >= ? ORDER BY segment_id
audit: type=1400 audit(1583509664.465:3455): apparmor="DENIED" operation="truncate" profile="snap.chromium.chromium" name="/home/sdeziel/snap/chromium/1040/.config/chromium/Default/History-journal" pid=6794 comm="Chrome_HistoryT" requested_mask="w" denied_mask="w" fsuid=1000 ouid=1000
[6794:6794:0306/104744.492608:ERROR:browser_main_loop.cc(277)] Gtk: gtk_icon_info_load_symbolic_for_context: assertion 'icon_info != NULL' failed
gdk_pixbuf_get_width: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
gdk_pixbuf_get_height: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
[6794:6794:0306/104744.493281:ERROR:browser_main_loop.cc(277)] Gtk: gtk_icon_info_load_symbolic_for_context: assertion 'icon_info != NULL' failed
gdk_pixbuf_get_width: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
gdk_pixbuf_get_height: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
[6794:6794:0306/104744.494319:ERROR:browser_main_loop.cc(277)] Gtk: gtk_icon_info_load_symbolic_for_context: assertion 'icon_info != NULL' failed
gdk_pixbuf_get_width: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
gdk_pixbuf_get_height: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
[6794:6794:0306/104744.553178:ERROR:browser_main_loop.cc(277)] Gtk: gtk_icon_info_load_symbolic_for_context: assertion 'icon_info != NULL' failed
gdk_pixbuf_get_width: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
gdk_pixbuf_get_height: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
[6794:6794:0306/104744.553388:ERROR:browser_main_loop.cc(277)] Gtk: gtk_icon_info_load_symbolic_for_context: assertion 'icon_info != NULL' failed
gdk_pixbuf_get_width: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
gdk_pixbuf_get_height: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
gdk_pixbuf_get_width: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
[6794:6794:0306/104744.553578:ERROR:browser_main_loop.cc(277)] Gtk: gtk_icon_info_load_symbolic_for_context: assertion 'icon_info != NULL' failed
gdk_pixbuf_get_height: assertion 'GDK_IS_PIXBUF (pixbuf)' failed
[6794:6937:0306/104744.808572:ERROR:database.cc(1584)] Thumbnail sqlite error 778, errno 0: disk I/O error, sql: UPDATE favicon_bitmaps SET last_updated=?, last_requested=? WHERE id=?
[6794:6937:0306/104744.810129:ERROR:database.cc(1584)] Thumbnail sqlite error 778, errno 0: disk I/O error, sql: UPDATE favicon_bitmaps SET last_updated=?, last_requested=? WHERE id=?
AVC apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F43757272656E742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
audit: type=1400 audit(1583509666.945:3456): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F43757272656E742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
AVC apparmor="DENIED" operation="truncate" profile="snap.chromium.chromium" name="/home/sdeziel/snap/chromium/1040/.config/chromium/Default/History-journal" pid=6794 comm="Chrome_HistoryT" requested_mask="w" denied_mask="w" fsuid=1000 ouid=1000
[6794:6937:0306/104753.555124:ERROR:database.cc(1584)] History sqlite error 1546, errno 0: disk I/O error, sql: SELECT id,url,visit_time,from_visit,transition,segment_id,visit_duration,incremented_omnibox_typed_score FROM visits WHERE id=?
audit: type=1400 audit(1583509673.549:3457): apparmor="DENIED" operation="truncate" profile="snap.chromium.chromium" name="/home/sdeziel/snap/chromium/1040/.config/chromium/Default/History-journal" pid=6794 comm="Chrome_HistoryT" requested_mask="w" denied_mask="w" fsuid=1000 ouid=1000
AVC apparmor="DENIED" operation="mknod" profile="snap.chromium.chromium" name="/home/sdeziel/snap/chromium/1040/.config/chromium/.org.chromium.Chromium.GhH4aA" pid=6794 comm="ThreadPoolForeg" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
audit: type=1400 audit(1583509674.441:3458): apparmor="DENIED" operation="mknod" profile="snap.chromium.chromium" name="/home/sdeziel/snap/chromium/1040/.config/chromium/.org.chromium.Chromium.GhH4aA" pid=6794 comm="ThreadPoolForeg" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
AVC apparmor="DENIED" operation="mknod" profile="snap.chromium.chromium" name="/home/sdeziel/snap/chromium/1040/.config/chromium/Default/.org.chromium.Chromium.x7rVyj" pid=6794 comm="ThreadPoolForeg" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
AVC apparmor="DENIED" operation="mknod" profile="snap.chromium.chromium" name="/home/sdeziel/snap/chromium/1040/.config/chromium/Default/.org.chromium.Chromium.vaqYEJ" pid=6941 comm="ThreadPoolForeg" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
audit: type=1400 audit(1583509674.521:3459): apparmor="DENIED" operation="mknod" profile="snap.chromium.chromium" name="/home/sdeziel/snap/chromium/1040/.config/chromium/Default/.org.chromium.Chromium.x7rVyj" pid=6794 comm="ThreadPoolForeg" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
audit: type=1400 audit(1583509674.521:3460): apparmor="DENIED" operation="mknod" profile="snap.chromium.chromium" name="/home/sdeziel/snap/chromium/1040/.config/chromium/Default/.org.chromium.Chromium.vaqYEJ" pid=6941 comm="ThreadPoolForeg" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000
[6794:6937:0306/104754.810597:ERROR:database.cc(1584)] History sqlite error 1, errno 0: cannot commit - no transaction is active, sql: COMMIT
[6794:6937:0306/104754.811356:ERROR:database.cc(1584)] Thumbnail sqlite error 1, errno 0: cannot commit - no transaction is active, sql: COMMIT
AVC apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F43757272656E742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000
audit: type=1400 audit(1583509675.021:3461): apparmor="DENIED" operation="open" profile="snap.chromium.chromium" name=2F686F6D652F7364657A69656C2F736E61702F6368726F6D69756D2F313034302F2E636F6E6669672F6368726F6D69756D2F44656661756C742F43757272656E742053657373696F6E pid=6794 comm="ThreadPoolForeg" requested_mask="wc" denied_mask="wc" fsuid=1000 ouid=1000

Additional information:

$ lsb_release -rd
Description: Ubuntu 18.04.4 LTS
Release: 18.04

$ uname -a
Linux simon-lemur 5.3.0-40-generic #32~18.04.1-Ubuntu SMP Mon Feb 3 14:05:59 UTC 2020 x86_64 x86_64 x86_64 GNU/Linux

$ snap info chromium
name: chromium
summary: Chromium web browser, open-source version of Chrome
publisher: Canonical✓
store-url: https://snapcraft.io/chromium
contact: https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bugs?field.tag=snap
license: unset
description: |
  An open-source browser project that aims to build a safer, faster, and more stable way for all
  Internet users to experience the web.
commands:
  - chromium.chromedriver
  - chromium
snap-id: XKEcBqPM06H1Z7zGOdG5fbICuf8NWK5R
tracking: latest/stable
refresh-date: yesterday at 15:55 EST
channels:
  stable: 80.0.3987.132 2020-03-05 (1043) 160MB -
  candidate: 80.0.3987.132 2020-03-04 (1043) 160MB -
  beta: 81.0.4044.43 2020-03-05 (1045) 161MB -
  edge: 81.0.4044.17 2020-02-14 (1028) 161MB -
installed: 80.0.3987.132 (1043) 160MB -

Revision history for this message
Olivier Tilloy (osomon) wrote :

It appears that the snap was updated while chromium was running, which messed up with the profile directory (revision 1040 mentioned in the logs is for version 80.0.3987.122). This is a known problem (bug #1616650), so I'm marking as a duplicate.

I strongly suggest you enable app refresh awareness¹ to avoid this in the future:

    snap set core experimental.refresh-app-awareness=true

¹ https://forum.snapcraft.io/t/wip-refresh-app-awareness/10736

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.