Hello Douglas, thanks for the report. AppArmor is one of several tools
the snap packaging system uses to enforce confinement on packages. The
AppArmor project doesn't supply the policy though, just the enforcement
mechanism. I believe you'll need to talk to whoever wrote the snap
package, as they request the privileges necessary when packaging the
application.
Try 'snap info' on the name of the snap package that provides the colour
picker; it should provide some contact details for the packager.
Thanks
** Changed in: apparmor (Ubuntu)
Status: New => Invalid
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to apparmor in Ubuntu.
https://bugs.launchpad.net/bugs/1851661
Title:
AppArmor denied operation open to snap pick-colour-picker
Status in apparmor package in Ubuntu:
Invalid
Bug description:
I've written an issue here:
https://github.com/stuartlangridge/ColourPicker/issues/63
Pick (a color picker distributed as a snap) will not launch. The
creator of the application believes this to be a problem with my
system, not with their app. Apparently, AppArmor is preventing it from
starting. I'm not familiar with this MAC implementation, but the logs
suggest that this is the problem. See the attachment.
```
nov 07 11:18:29 alq22 audit[27542]: AVC apparmor="DENIED" operation="open"
profile="snap.pick-colour-picker.pick-colour-picker" name="/proc/27542/mounts"
pid=27542 comm="python3" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
nov 07 11:18:29 alq22 kernel: audit: type=1400 audit(1573136309.796:304):
apparmor="DENIED" operation="open"
profile="snap.pick-colour-picker.pick-colour-picker" name="/proc/27542/mounts"
pid=27542 comm="python3" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
```
This is a fresh installation of Ubuntu 18.04.3. I take great care not
to mess with system components such as snapd. Other snaps are working
properly.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1851661/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
