Verify on resolute: PASS
========================
#### 2.76.3+ubuntu26.04
```
snap version --verbose
snap 2.76.3
snapd 2.76.3
series 16
ubuntu 26.04
kernel 7.0.0-34-generic
architecture amd64
snapd-bin-from native-package
snap-bin-from native-package
snap run test-snapd-sh-core26.sh -c 'cat /proc/self/smaps_rollup'
cat: /proc/self/smaps_rollup: Permission denied
grep -n smaps_rollup
/var/lib/snapd/apparmor/profiles/snap.test-snapd-sh-core26.sh
(no rule)
journalctl -b | grep smaps_rollup
Oct 08 17:27:36 sru-2160691-resolute audit[501990]: AVC apparmor="DENIED"
operation="open" class="file" profile="snap.test-snapd-sh-core26.sh"
name="/proc/501990/smaps_rollup" pid=501990 comm="cat" requested_mask="r"
denied_mask="r" fsuid=0 ouid=0
```
#### 2.77.1+ubuntu26.04.2 from resolute-proposed
```
snap version --verbose
snap 2.77.1+ubuntu26.04.2
snapd 2.77.1+ubuntu26.04.2
series 16
ubuntu 26.04
kernel 7.0.0-34-generic
architecture amd64
snapd-bin-from native-package
snap-bin-from native-package
grep -n smaps_rollup
/var/lib/snapd/apparmor/profiles/snap.test-snapd-sh-core26.sh
221: @{PROC}/@{pid}/smaps_rollup r,
snap run test-snapd-sh-core26.sh -c 'cat /proc/self/smaps_rollup'
644fa9bc4000-7ffec888e000 ---p 00000000 00:00 0
[rollup]
Rss: 7212 kB
Pss: 6422 kB
...
```
No smaps_rollup denials after the upgrade. The allow rule is the snap's
own pid only.
** Tags removed: verification-needed-jammy verification-needed-noble
verification-needed-resolute
** Tags added: verification-done-jammy verification-done-noble
verification-done-resolute
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2110510
Title:
New AppArmor logspam under snap v136.0.7103.92
To manage notifications about this bug go to:
https://bugs.launchpad.net/snapd/+bug/2110510/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
