snap-confine denial when trying to invoke snap-discard-ns

Bug #1822660 reported by Zygmunt Krynicki on 2019-04-01
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
snapd
High
Zygmunt Krynicki

Bug Description

Noticed in spread testing:

[Mon Apr 1 17:06:36 2019] audit: type=1400 audit(1554138396.686:326): apparmor="DENIED" operation="exec" profile="/snap/snapd/x1/usr/lib/snapd/snap-confine" name="/snap/snapd/x1/usr/lib/snapd/snap-discard-ns" pid=6756 comm="snap-confine" requested_mask="x" denied_mask="x" fsuid=0 ouid=0

This will likely occur whenever snapd.snap is the source of snapd tools

I encountered it while running google:ubuntu-core-18-64:tests/main/base-migration

Zygmunt Krynicki (zyga) on 2019-04-01
Changed in snapd:
status: New → In Progress
assignee: nobody → Zygmunt Krynicki (zyga)
milestone: none → 2.39
importance: Undecided → High
description: updated
Zygmunt Krynicki (zyga) on 2019-04-02
Changed in snapd:
status: In Progress → Fix Committed
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers