Re: Snap install apparmor error: 'profile has merged rule with conflicting x modifiers'

2017-01-22 Thread Mark Shuttleworth
On 20/01/17 15:36, Joseph Rushton Wakeling wrote:
> Does this mean that classic snaps automatically have network access? 
> In any case it looks like requesting it explicitly causes a problem in
> generating the appropriate apparmor profile.


Yes, we're untangling the confinement logic at the moment, so for now
drop plugs and slots from classic snaps. The intent, though, is that you
can add them safely and test with --jailmode as part of your journey to
strict confinement.

--jailmode is the opposite of --devmode, it lets you impose the
confinement with plugs and slots in cases (like --classic) where that
confinement would not automatically be imposed.

Mark


-- 
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft


Snap install apparmor error: 'profile has merged rule with conflicting x modifiers'

2017-01-20 Thread Joseph Rushton Wakeling

Hello folks,

With my LDC snap seemingly sorted, I'm now turning attention to my snap for the 
DUB build system:

https://github.com/WebDrake/dub.snap/pull/1/files

I've been able to get this to build as a classic snap with minimal tweaks (just 
switching `strict` => `classic` confinement and adding


stage-packages:
- libconfig9
- libphobos2-ldc68

... to the `ldc` part.

All builds fine, but when I try to install with

sudo snap install --classic --dangerous dub_1.1.1_amd64.snap

I get an error message:

---
error: cannot perform the following tasks:
- Setup snap "dub" (unset) security profiles (cannot setup apparmor for snap 
"dub": cannot load apparmor profile "snap.dub.dub": cannot load apparmor 
profile: exit status 1

apparmor_parser output:
profile has merged rule with conflicting x modifiers
ERROR processing regexs for profile snap.dub.dub, failed to load
)
- Setup snap "dub" (unset) security profiles (cannot load apparmor profile 
"snap.dub.dub": cannot load apparmor profile: exit status 1

apparmor_parser output:
profile has merged rule with conflicting x modifiers
ERROR processing regexs for profile snap.dub.dub, failed to load
)
---

Can anyone suggest what could be wrong here?  The package builds and installs 
fine with `strict` confinement.


Thanks & best wishes,

-- Joe

--
Snapcraft mailing list
Snapcraft@lists.snapcraft.io
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft