snapd system-observe interface is missing rules to allow memory usage analysis

[Martin Wimpress ]

Last night I created a snap for ps_mem [1] a memory usage analyser I often use. It runs in devmode but when confined the `system-observe` interface is missing rules that allow deeper memory usage analysis, for example ps_mem wants read access to:

 - /sys/kernel/osrelease
 - /proc/<pid>/smaps
 - /proc/<pid>/cmdline
 - /proc/<pid>/exe
 - /proc/meminfo

I'll prepare a pull request.

[1] - https://github.com/pixelb/ps_mem

[Michael Vogt (mvo)]

https://github.com/snapcore/snapd/pull/2365

[Michael Vogt (mvo)]

I added the missing bits to system-observer in the linked branch. Note that it appears to be /*proc*/sys/kernel/osrelease (instead of just /sys/kernel/osrelease)

[Martin Wimpress  (flexiondotorg)]

@mvo Thanks for submitting the pull request. However, I don't see `/proc/<pid>/cmdline` in there?

[Martin Wimpress  (flexiondotorg)]

Oh, actually, yes I do. Pre-existing. Sorry for the noise.

[Jamie Strandboge (jdstrand)]

2.20 fixes this issue.