execl failed: Permission denied when running snaps

Bug #1900306 reported by Linus Kardell
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
snapd
High
Maciej Borzecki
snapd (Ubuntu)
Undecided
Unassigned

Bug Description

I am now getting an error when I try to run a contained snap on openSUSE Tumbleweed:

linus@sudda:~> snap version
snap 2.47.1-1.1
snapd 2.47.1-1.1
series 16
opensuse-tumbleweed 20201014
kernel 5.8.14-1-default
linus@sudda:~> spotify
execl failed: Permission denied
child exited with status 1: File exists

Don't know if it's related, but when I reinstall snapd, it says:
/usr/libexec/snapd/snap-confine: no configuration entry in active permission profiles found. Cannot check this path.

Revision history for this message
Maciej Borzecki (maciek-borzecki) wrote :

Thanks for the report. Looks like an aftermath of the %libexec change in TW. Surprisingly snap-store, which also is a graphical snap, works just fine. I'll open a fix for master and push an update to OBS.

Changed in snapd:
status: New → In Progress
assignee: nobody → Maciej Borzecki (maciek-borzecki)
importance: Undecided → High
Changed in snapd (Ubuntu):
status: New → Invalid
Revision history for this message
Maciej Borzecki (maciek-borzecki) wrote :

In the meantime, you can edit /etc/apparmor.d/usr.libexec.snapd.snap-confine, in line 74, there is:

  /usr/lib/snapd/snap-device-helper ixr,

Please change that to

  /usr/libexec/snapd/snap-device-helper ixr,

Then run `systemctl restart apparmor.service`, and things should be fine again.

Revision history for this message
Maciej Borzecki (maciek-borzecki) wrote :

https://github.com/snapcore/snapd/pull/9515 this should fix the problem in master

Changed in snapd:
status: In Progress → Fix Committed
Revision history for this message
Maciej Borzecki (maciek-borzecki) wrote :

https://build.opensuse.org/request/show/842527 landed, system:snappy has been updated and packages have been rebuilt.

Revision history for this message
Linus Kardell (linagkar) wrote :

Thank you, it now works again after updating snapd.

Revision history for this message
Timo Jyrinki (timo-jyrinki) wrote :

snapd update did fix the bug's issue, but instead I now get for all snap apps (persists after rebooting):

/usr/lib/snapd/snap-exec: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.32' not found (required by /usr/lib/snapd/snap-exec)

I'm just wondering whether this is some Factory <-> system:snappy <-> TW sync issue or what's in play? I mean, before filing a new bug, since Linus is reporting it's working. I'm running largely plain TW + system:snappy repo.

Revision history for this message
Maciej Borzecki (maciek-borzecki) wrote :

@timo-jyrinki thanks for reporting. There is indeed a packaging problem. I've filed https://bugs.launchpad.net/snapd/+bug/1900807 to track it.

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers