** Summary changed: - 'aa_change_onexec failed with -1. errmsg: Permission denied' with snaps using 'unconfined' template + 'aa_change_onexec failed with -1. errmsg: Permission denied'
** Description changed: - $ bzr branch lp:~dpm/ubuntu-clock-app/snap-all-things ubuntu-clock-app.dpm - $ snapcraft - $ sudo snappy install --allow-unauthenticated ubuntu-clock-app_3.6+snap2_amd64.snap + $ sudo snappy install ubuntu-clock-app.ubuntucore-dev $ ubuntu-clock-app.clock aa_change_onexec failed with -1. errmsg: Permission denied [1] - Confined apps seem to work ok: + Downgrading to ubuntu-core-launcher doesn't help the clock app get past + this failure. + + + The hello-world app works ok (it needs ubuntu-core-launcher 1.0.20 since it gets past the above error and the launcher needs to account for NO_NEW_PRIVS): $ hello-world.env |grep SNAP= SNAP=/snaps/hello-world.canonical/6.0 $ sudo /snaps/bin/hello-world.env |grep SNAP= SNAP=/snaps/hello-world.canonical/6.0 ** Description changed: $ sudo snappy install ubuntu-clock-app.ubuntucore-dev $ ubuntu-clock-app.clock aa_change_onexec failed with -1. errmsg: Permission denied [1] Downgrading to ubuntu-core-launcher doesn't help the clock app get past this failure. - The hello-world app works ok (it needs ubuntu-core-launcher 1.0.20 since it gets past the above error and the launcher needs to account for NO_NEW_PRIVS): $ hello-world.env |grep SNAP= SNAP=/snaps/hello-world.canonical/6.0 $ sudo /snaps/bin/hello-world.env |grep SNAP= SNAP=/snaps/hello-world.canonical/6.0 + + cap-test.mvo doesn't have this problem either: + $ sudo snappy install cap-test.mvo + $ cap-test.mvo ** Description changed: $ sudo snappy install ubuntu-clock-app.ubuntucore-dev $ ubuntu-clock-app.clock aa_change_onexec failed with -1. errmsg: Permission denied [1] Downgrading to ubuntu-core-launcher doesn't help the clock app get past this failure. The hello-world app works ok (it needs ubuntu-core-launcher 1.0.20 since it gets past the above error and the launcher needs to account for NO_NEW_PRIVS): $ hello-world.env |grep SNAP= SNAP=/snaps/hello-world.canonical/6.0 $ sudo /snaps/bin/hello-world.env |grep SNAP= SNAP=/snaps/hello-world.canonical/6.0 cap-test.mvo doesn't have this problem either: $ sudo snappy install cap-test.mvo - $ cap-test.mvo + $ cap-test.xbomb -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1562989 Title: 'aa_change_onexec failed with -1. errmsg: Permission denied' To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/ubuntu-core-launcher/+bug/1562989/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
