Public bug reported:
On Ubuntu 26.04 (resolute), snapd 2.75.2+ubuntu26.04.2, kernel
7.0.0-27-generic:
Classic-confinement snaps (e.g. obsidian) fail to launch with exit code 1.
Strict-confinement snaps (e.g. thunderbird) launch normally.
Error from strace on /usr/lib/snapd/snap-confine:
snap-confine is packaged without necessary permissions and cannot continue
required permitted capability cap_dac_override not found in current
capabilities:
cap_wake_alarm=i: Argument list too long
Ruled out as causes:
- File capabilities on snap-confine are correct (getcap shows cap_dac_override
and others present)
- Kernel capability bounding set for user session is full/standard
(CapBnd: 000001ffffffffff, cap_last_cap=40)
- No PAM capability restrictions configured
- apparmor_restrict_unprivileged_userns tested at both 0 and 1, no change
- snapd.apparmor.service loads profiles successfully, snap-confine profile
is present per aa-status
- SNAP_REEXEC=0 tested, no change
- Reinstalling snapd (apt install --reinstall snapd) did not resolve it
- Reinstalling the obsidian snap did not resolve it
Reproducible 100% of the time. sudo snap run --shell obsidian (as root)
works without error, suggesting the issue is specific to unprivileged
user invocation, though the user's capability bounding set appears
otherwise unrestricted.
snap version:
snap 2.75.2+ubuntu26.04.2
snapd 2.75.2+ubuntu26.04.2
series 16
ubuntu 26.04
kernel 7.0.0-27-generic
** Affects: snapd (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2160420
Title:
snap-confine fails for classic confinement snaps: "cap_dac_override
not found... cap_wake_alarm=i: Argument list too long"
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/2160420/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
