ubuntu-core-launcher needs urandom access

Bug #1595029 reported by Chad Miller
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
snap-confine
Fix Released
Medium
Jamie Strandboge
ubuntu-core-launcher (Ubuntu)
In Progress
Medium
Jamie Strandboge

Bug Description

systemd[1]: Started Service for snap application tor-middle-relay.daemon.
kernel: [1084216.108581] type=1400 audit(1466564994.109:51): apparmor="DENIED" operation="open" parent=1 profile="/usr/bin/ubuntu-core-launcher" name="/dev/urandom" pid=21206 comm="ubuntu-core-lau" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
ubuntu-core-launcher[21206]: seccomp_load failed with -22
ubuntu-core-launcher[21206]: aborting. errmsg: Invalid argument
systemd[1]: snap.tor-middle-relay.daemon.service: Main process exited, code=exited, status=1/FAILURE
systemd[1]: snap.tor-middle-relay.daemon.service: Unit entered failed state.
systemd[1]: snap.tor-middle-relay.daemon.service: Failed with result 'exit-code'.
systemd[1]: snap.tor-middle-relay.daemon.service: Service hold-off time over, scheduling restart.
systemd[1]: Stopped Service for snap application tor-middle-relay.daemon.

ProblemType: Bug
DistroRelease: Ubuntu 16.04
Package: snapd 2.0.9
ProcVersionSignature: Ubuntu 3.2.0-1412.16-omap4 3.2.14
Uname: Linux 3.2.0-1412-omap4 armv7l
ApportVersion: 2.20.1-0ubuntu2.1
Architecture: armhf
Date: Tue Jun 21 23:18:35 2016
SourcePackage: snapd
UpgradeStatus: Upgraded to xenial on 2016-05-11 (42 days ago)

Revision history for this message
Chad Miller (cmiller) wrote :
Revision history for this message
Jamie Strandboge (jdstrand) wrote :
affects: snapd (Ubuntu) → ubuntu-core-launcher (Ubuntu)
Changed in ubuntu-core-launcher (Ubuntu):
assignee: nobody → Jamie Strandboge (jdstrand)
importance: Undecided → Medium
status: New → In Progress
Zygmunt Krynicki (zyga)
Changed in snap-confine:
milestone: none → 1.0.34
status: New → Fix Committed
importance: Undecided → Medium
assignee: nobody → Jamie Strandboge (jdstrand)
Zygmunt Krynicki (zyga)
Changed in snap-confine:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.