SELinux blocks snaps on fedora
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
snapd |
Fix Released
|
Undecided
|
Maciej Borzecki |
Bug Description
This was originally a forum thread at https:/
On Fedora 27, I can no longer install or run snaps at all.
snap 2.28.5-2.fc27
snapd 2.28.5-2.fc27
series 16
fedora 27
kernel 4.13.13-
I get an SELinux error when I do anything snap related, and it fails.
Nov 30 16:13:30 localhost.
Nov 30 16:13:30 localhost.
Changed in snapd: | |
status: | In Progress → Fix Committed |
Changed in snapd: | |
status: | Fix Committed → Fix Released |
Also replied in the forums: https:/ /forum. snapcraft. io/t/selinux- blocking- snapd-since- update- on-fedora- 27/3002/ 2
Pulled the latest Fedora cloud image. Installed snapd and kernel-modules (to get squashfs driver). Things seem to be working just fine here:
[fedora@localhost ~]$ sudo snap install hello-world localdomain 4.14.5- 300.fc27. x86_64 #1 SMP Mon Dec 11 16:00:36 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux 300.fc27. x86_64
hello-world 6.3 from 'canonical' installed
[fedora@localhost ~]$ snap list
Name Version Rev Developer Notes
core 16-2.29.4.2 3604 canonical core
hello-world 6.3 27 canonical -
[fedora@localhost ~]$ uname -a
Linux localhost.
[fedora@localhost ~]$ snap version
snap 2.29.4-2.fc27
snapd 2.29.4-2.fc27
series 16
fedora 27
kernel 4.14.5-
[fedora@localhost ~]$ getenforce
Enforcing
getattr getting blocked by SELinux seems to be unrelated.
Before updating the system and snapd package can you check:
- selinux is in enforcing mode
- does it still freeze if selinux is in permissive?
- long shot but check if there are unlabeled files find / -context '*unlabeled_t*',
this should list only files under /var/lib/snapd/snap (the snaps that are installed
and mounted)
If nothing unusual comes up, can you update the system to the latest kernel and snapd
pacakge and try again?