** Description changed:

  OS: Ubuntu 26.04
  snapd (deb): 2.74.1+ubuntu26.04.3
  snapd (snap): 2.74.1
  
  The error (from dmesg):
  
  apparmor="DENIED" operation="open" class="file"
  profile="snap.slack.hook.configure" name="/proc/[PID]/mountinfo"
  pid=[PID] comm="snap-exec" requested_mask="r" denied_mask="r"
  
  The result:
  
  Slack fails to launch with no terminal output
  
  The application also fails due to Seccomp violations. dmesg shows
  multiple type=1326 audits where the process is killed for attempting to
  use syscalls not yet whitelisted in the Ubuntu 26.04 snapd templates:
  
- * syscall 425 (landlock_create)
+ * syscall 425 (io_uring_op)
  * syscall 330 (pkey_mprotect)
  * syscall 203 (sched_setaffinity)
  
  audit log snippet:
  
  [93569.641540] audit: type=1326 audit(1776257860.317:3383): auid=1000
  uid=1000 gid=1000 ses=3 subj=snap.slack.slack pid=240874 comm="slack"
  exe="/snap/slack/224/usr/lib/slack/slack" sig=0 arch=c000003e
  syscall=425 compat=0 ip=0x7bd8351039ad code=0x50000

** Description changed:

  OS: Ubuntu 26.04
  snapd (deb): 2.74.1+ubuntu26.04.3
  snapd (snap): 2.74.1
  
  The error (from dmesg):
  
  apparmor="DENIED" operation="open" class="file"
  profile="snap.slack.hook.configure" name="/proc/[PID]/mountinfo"
  pid=[PID] comm="snap-exec" requested_mask="r" denied_mask="r"
  
  The result:
  
  Slack fails to launch with no terminal output
  
  The application also fails due to Seccomp violations. dmesg shows
  multiple type=1326 audits where the process is killed for attempting to
  use syscalls not yet whitelisted in the Ubuntu 26.04 snapd templates:
  
  * syscall 425 (io_uring_op)
  * syscall 330 (pkey_mprotect)
  * syscall 203 (sched_setaffinity)
  
  audit log snippet:
  
  [93569.641540] audit: type=1326 audit(1776257860.317:3383): auid=1000
  uid=1000 gid=1000 ses=3 subj=snap.slack.slack pid=240874 comm="slack"
  exe="/snap/slack/224/usr/lib/slack/slack" sig=0 arch=c000003e
  syscall=425 compat=0 ip=0x7bd8351039ad code=0x50000
+ 
+ ...
+ 
+ [99592.653714] kauditd_printk_skb: 125 callbacks suppressed

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2148467

Title:
  Slack snap (rev 224) hook.configure AppArmor denial on /proc/mountinfo
  (Ubuntu 26.04)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/2148467/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to