Public bug reported:
bwrap --new-session --ro-bind /bin /bin --ro-bind /usr /usr --ro-bind
/lib /lib --ro-bind /lib64 /lib64 /bin/bash
expected: bash starts
actual: bwrap: setting up uid map: Permission denied
Workaround:
sudo tee /etc/apparmor.d/bwrap << 'EOF'
abi <abi/4.0>,
include <tunables/global>
profile bwrap /usr/bin/bwrap flags=(unconfined) {
userns,
}
EOF
sudo apparmor_parser -r /etc/apparmor.d/bwrap
This has similar symptoms to
https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2069526, but the
fix from there doesn't work
$ uname -a
Linux HOSTNAME 6.17.0-35-generic #35~24.04.1-Ubuntu SMP PREEMPT_DYNAMIC Tue May
26 19:30:42 UTC 2 x86_64 x86_64 x86_64 GNU/Linux
$ lsb_release -rd
No LSB modules are available.
Description: Ubuntu 24.04.4 LTS
Release: 24.04
$ dpkg -l apparmor
||/ Name Version Architektur Beschreibung
+++-==============-=================================-============-======================================
ii apparmor 4.0.1really4.0.1-0ubuntu0.24.04.7 amd64 user-space
parser utility for AppArmor
** Affects: bubblewrap (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2162059
Title:
bwrap: setting up uid map: Permission denied
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/bubblewrap/+bug/2162059/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
