Uploaded image for project: 'CouchDB'
  1. CouchDB
  2. COUCHDB-3226

Build under snap container is denied access to /bindf

        Details

        • Type: Bug
        • Status: Open
        • Priority: Major
        • Resolution: Unresolved
        • Affects Version/s: None
        • Fix Version/s: None
        • Component/s: Build System
        • Labels:
          None

          Description


          dmesg is logging "audit: type=1400 audit(1478517224.548:198): apparmor="DENIED" operation="exec" profile="snap.couchdb.couchdb" name="/bin/df" pid=16227 comm="sh" requested_mask="x" denied_mask="x" fsuid=0 ouid=0"

            Activity

            Ascending order - Click to sort in descending order
            Hide
            Permalink
            mhall119 Michael Hall added a comment -

            This should be fixed in snapd 2.18, if using the mount-observe plug the application will be allowed to call df

            Show
            mhall119 Michael Hall added a comment - This should be fixed in snapd 2.18, if using the mount-observe plug the application will be allowed to call df
            Hide
            Permalink
            mhall119 Michael Hall added a comment -

            I've added the mount-observe interface to the snapcraft.yaml generated by the configure script

            https://github.com/apache/couchdb/pull/446

            Show
            mhall119 Michael Hall added a comment - I've added the mount-observe interface to the snapcraft.yaml generated by the configure script https://github.com/apache/couchdb/pull/446

              People

              • Assignee:
                Unassigned
                Reporter:
                sklassen Simon C Klassen
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:

                  Development