Ubuntu
snapd package

  1. Bug #1572463
  2. Comment #1

Comment 1 for bug 1572463

Revision history for this message
Michael Vogt (mvo) wrote : Re: Installing a new two times leaves it with no security profiles

Here is the output of syslog:

```
Apr 20 11:17:02 top /usr/lib/snapd/snapd[2951]: taskrunner.go:234: DEBUG: Running task 28 on Do: Mount snap "youtube-dl"
Apr 20 11:17:02 top systemd[1]: Mounting Squashfs mount unit for youtube-dl...
Apr 20 11:17:03 top systemd[1]: Mounted Squashfs mount unit for youtube-dl.
Apr 20 11:17:03 top /usr/lib/snapd/snapd[2951]: taskrunner.go:234: DEBUG: Running task 29 on Do: Copy snap "youtube-dl" data
Apr 20 11:17:03 top /usr/lib/snapd/snapd[2951]: taskrunner.go:234: DEBUG: Running task 30 on Do: Setup snap "youtube-dl" security profiles
Apr 20 11:17:03 top kernel: [13338.436765] audit: type=1400 audit(1461143823.099:127): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.youtube-dl.run" pid=28776 comm="apparmor_parser"
Apr 20 11:17:03 top /usr/lib/snapd/snapd[2951]: taskrunner.go:234: DEBUG: Running task 31 on Do: Make snap "youtube-dl" available to the system
Apr 20 11:17:03 top snap[28710]: main.go:151: DEBUG: cannot parse arguments: [snap install youtube-dl_2016.03.27_amd64.snap]: <nil>
Apr 20 11:17:06 top kernel: [13342.020641] audit: type=1400 audit(1461143826.683:128): apparmor="DENIED" operation="open" profile="snap.youtube-dl.run" name="/proc/28781/mounts" pid=28781 comm="python3" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Apr 20 11:17:06 top kernel: [13342.178885] audit: type=1400 audit(1461143826.839:129): apparmor="DENIED" operation="exec" profile="snap.youtube-dl.run" name="/sbin/ldconfig" pid=28782 comm="python3" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
Apr 20 11:17:06 top kernel: [13342.183377] audit: type=1400 audit(1461143826.847:130): apparmor="DENIED" operation="exec" profile="snap.youtube-dl.run" name="/sbin/ldconfig" pid=28784 comm="python3" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0
Apr 20 11:17:10 top /usr/lib/snapd/snapd[2951]: taskrunner.go:234: DEBUG: Running task 33 on Do: Mount snap "youtube-dl"
Apr 20 11:17:11 top systemd[1]: Mounting Squashfs mount unit for youtube-dl...
Apr 20 11:17:11 top systemd[1]: Mounted Squashfs mount unit for youtube-dl.
Apr 20 11:17:11 top /usr/lib/snapd/snapd[2951]: taskrunner.go:234: DEBUG: Running task 34 on Do: Make current revision for snap "youtube-dl" unavailable
Apr 20 11:17:11 top /usr/lib/snapd/snapd[2951]: taskrunner.go:234: DEBUG: Running task 35 on Do: Copy snap "youtube-dl" data
Apr 20 11:17:11 top /usr/lib/snapd/snapd[2951]: taskrunner.go:234: DEBUG: Running task 36 on Do: Setup snap "youtube-dl" security profiles
Apr 20 11:17:11 top kernel: [13346.496807] audit: type=1400 audit(1461143831.159:131): apparmor="STATUS" operation="profile_replace" profile="unconfined" name="snap.youtube-dl.run" pid=28846 comm="apparmor_parser"
Apr 20 11:17:11 top /usr/lib/snapd/snapd[2951]: taskrunner.go:234: DEBUG: Running task 37 on Do: Make snap "youtube-dl" available to the system
Apr 20 11:17:11 top snap[28789]: main.go:151: DEBUG: cannot parse arguments: [snap install youtube-dl_2016.03.27_amd64.snap]: <nil>
Apr 20 11:17:13 top kernel: [13348.347319] audit: type=1400 audit(1461143833.011:132): apparmor="DENIED" operation="open" profile="snap.youtube-dl.run" name="/snap/youtube-dl/100002/command-run.wrapper" pid=28849 comm="command-run.wra" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
```

Note that the task "Setup snap "youtube-dl" security profiles" runs twice. However only the first one shows the apparmor parser output.