http://bugzilla.novell.com/show_bug.cgi?id=1117216
http://bugzilla.novell.com/show_bug.cgi?id=1117216#c8
--- Comment #8 from Nathan Wolf ---
I am just running a typical, non-container installation. These are the relevant
lines:
type=AVC msg=audit(1552428358.688:296): apparmor="DENIED" operation="open"
profile="/usr/bin/snap" name="/proc/version" pid=4856 comm="cryptowatch"
requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
type=AVC msg=audit(1552428358.688:297): apparmor="DENIED" operation="open"
profile="/usr/bin/snap" name="/proc/sys/net/core/somaxconn" pid=4856
comm="cryptowatch" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
type=AVC msg=audit(1552428358.692:298): apparmor="DENIED" operation="open"
profile="/usr/bin/snap" name="/sys/kernel/security/apparmor/features/" pid=4856
comm="cryptowatch" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
type=AVC msg=audit(1552428358.692:299): apparmor="DENIED" operation="exec"
profile="/usr/bin/snap" name="/sbin/apparmor_parser" pid=4862
comm="cryptowatch" requested_mask="x" denied_mask="x" fsuid=1001 ouid=0
type=AVC msg=audit(1552428358.692:300): apparmor="DENIED" operation="open"
profile="/usr/bin/snap" name="/proc/4856/mountinfo" pid=4856 comm="cryptowatch"
requested_mask="r" denied_mask="r" fsuid=1001 ouid=1001
type=AVC msg=audit(1552428358.692:301): apparmor="DENIED"
operation="file_receive" profile="/usr/bin/snap" name="/var/lib/nscd/passwd"
pid=4856 comm="cryptowatch" requested_mask="r" denied_mask="r" fsuid=1001
ouid=0
type=AVC msg=audit(1552428358.692:302): apparmor="DENIED" operation="open"
profile="/usr/bin/snap" name="/snap/cryptowatch/5/meta/snap.yaml" pid=4856
comm="cryptowatch" requested_mask="r" denied_mask="r" fsuid=1001 ouid=0
That tells me it is indeed an AppArmor issue.
I do not know what the process required to fix the AppArmor rules.
--
You are receiving this mail because:
You are on the CC list for the bug.