snap-confine denial when trying to invoke snap-discard-ns

Bug #1822660 reported by Zygmunt Krynicki
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
snapd
Fix Released
High
Zygmunt Krynicki

Bug Description

Noticed in spread testing:

[Mon Apr 1 17:06:36 2019] audit: type=1400 audit(1554138396.686:326): apparmor="DENIED" operation="exec" profile="/snap/snapd/x1/usr/lib/snapd/snap-confine" name="/snap/snapd/x1/usr/lib/snapd/snap-discard-ns" pid=6756 comm="snap-confine" requested_mask="x" denied_mask="x" fsuid=0 ouid=0

This will likely occur whenever snapd.snap is the source of snapd tools

I encountered it while running google:ubuntu-core-18-64:tests/main/base-migration

Zygmunt Krynicki (zyga)
Changed in snapd:
status: New → In Progress
assignee: nobody → Zygmunt Krynicki (zyga)
milestone: none → 2.39
importance: Undecided → High
description: updated
Revision history for this message
Zygmunt Krynicki (zyga) wrote :
Zygmunt Krynicki (zyga)
Changed in snapd:
status: In Progress → Fix Committed
Zygmunt Krynicki (zyga)
Changed in snapd:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.