execl failed: Permission denied when running snaps

[Linus Kardell]

I am now getting an error when I try to run a contained snap on openSUSE Tumbleweed:

linus@sudda:~> snap version
snap 2.47.1-1.1
snapd 2.47.1-1.1
series 16
opensuse-tumbleweed 20201014
kernel 5.8.14-1-default
linus@sudda:~> spotify
execl failed: Permission denied
child exited with status 1: File exists

Don't know if it's related, but when I reinstall snapd, it says:
/usr/libexec/snapd/snap-confine: no configuration entry in active permission profiles found. Cannot check this path.

[Maciej Borzecki (maciek-borzecki)]

Thanks for the report. Looks like an aftermath of the %libexec change in TW. Surprisingly snap-store, which also is a graphical snap, works just fine. I'll open a fix for master and push an update to OBS.

[Maciej Borzecki (maciek-borzecki)]

In the meantime, you can edit /etc/apparmor.d/usr.libexec.snapd.snap-confine, in line 74, there is:

  /usr/lib/snapd/snap-device-helper ixr,

Please change that to

  /usr/libexec/snapd/snap-device-helper ixr,

Then run `systemctl restart apparmor.service`, and things should be fine again.

[Maciej Borzecki (maciek-borzecki)]

https://github.com/snapcore/snapd/pull/9515 this should fix the problem in master

[Maciej Borzecki (maciek-borzecki)]

https://build.opensuse.org/request/show/842527 landed, system:snappy has been updated and packages have been rebuilt.

[Linus Kardell (linagkar)]

Thank you, it now works again after updating snapd.

[Timo Jyrinki (timo-jyrinki)]

snapd update did fix the bug's issue, but instead I now get for all snap apps (persists after rebooting):

/usr/lib/snapd/snap-exec: /lib/x86_64-linux-gnu/libc.so.6: version `GLIBC_2.32' not found (required by /usr/lib/snapd/snap-exec)

I'm just wondering whether this is some Factory <-> system:snappy <-> TW sync issue or what's in play? I mean, before filing a new bug, since Linus is reporting it's working. I'm running largely plain TW + system:snappy repo.

[Maciej Borzecki (maciek-borzecki)]

@timo-jyrinki thanks for reporting. There is indeed a packaging problem. I've filed https://bugs.launchpad.net/snapd/+bug/1900807 to track it.