snappy-hwe-snaps

  1. Bug #1602383
  2. Comment #0

Comment 0 for bug 1602383

Revision history for this message
Tony Espy (awe) wrote : [Snap] NetworkManager miscellaneous Apparmor errors

While testing the latest NM snap on a RPI2 ( see below for image details ), a review of NM's log messages in syslog show two apparmor denials that should be investigated:

Capability denial:

apparmor="DENIED" operation="capable" profile="snap.network-manager.networkmanager" capability=1 capname="dac_override"

Udev denials:

apparmor="DENIED" operation="open" profile="snap.network-manager.networkmanager" name="/run/udev/data/n3" requested_mask="r"
apparmor="DENIED" operation="open" profile="snap.network-manager.networkmanager" name="/run/udev/data/n1" requested_mask="r"
apparmor="DENIED" operation="open" profile="snap.network-manager.networkmanager" name="/run/udev/data/n2" requested_mask="r"
apparmor="DENIED" operation="open" profile="snap.network-manager.networkmanager" name="/run/udev/data/n4" requested_mask="r"

Ptrace denials:

apparmor="DENIED" operation="ptrace" profile="snap.network-manager.networkmanager" requested_mask="trace" peer="snap.network-manager.nmcli"

Here's my snap configuration:

Name Version Rev Developer
canonical-pi2 3.2 6 canonical
canonical-pi2-linux 4.4.0-1009-raspi2+20160421.13-36 12 canonical
network-manager 1.2.2-1 8 canonical
ubuntu-core 16.04+20160531.12-01 120 canonical