[Bug 1926442] Re: [SRU] cannot execute 'netplan generate' from within a snap

[Lukas Märdian]

** Changed in: netplan.io (Ubuntu Impish)
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to netplan.io in Ubuntu.
Matching subscriptions: foundations-bugs
https://bugs.launchpad.net/bugs/1926442

Title:
  [SRU] cannot execute 'netplan generate' from within a snap

Status in Snappy:
  Confirmed
Status in netplan.io package in Ubuntu:
  Fix Released
Status in netplan.io source package in Bionic:
  New
Status in netplan.io source package in Focal:
  New
Status in netplan.io source package in Groovy:
  Won't Fix
Status in netplan.io source package in Hirsute:
  New
Status in netplan.io source package in Impish:
  Fix Released

Bug description:
  A snap, connected to the 'network-setup-control' interface can edit
  files in /etc/netplan/ but it is not able to execute 'netplan
  generate' command successfully.

  A call to '/usr/sbin/netplan generate' fails with apparmor errors like this:
  [  529.034756] audit: type=1400 audit(1619611886.273:702): apparmor="DENIED" operation="exec" profile="snap.network-manager.networkmanager" name="/usr/lib/netplan/generate" pid=15227 comm="netplan" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
  Apr 28 12:13:55 foobar network-manager.networkmanager[2280]: PermissionError: [Errno 13] Permission denied: '/lib/netplan/generate

  It looks like the Python wrapper for netplan (in /usr/sbin/netplan) is
  whitelisted, but the actual netplan generator (in
  /usr/lib/netplan/generate) is not.

To manage notifications about this bug go to:
https://bugs.launchpad.net/snappy/+bug/1926442/+subscriptions