SNAP_USER_COMMON

[Vasilisc]

02.08.2016 09:00, Didier Roche пишет:
> Le 02/08/2016 à 07:45, Vasilisc a écrit :
>>
>> test snap raise error
>> -------------------------
>> echo "Writing to $SNAP_USER_COMMON"
>> mkdir -p $SNAP_USER_COMMON/platform
>> echo "hello common" > $SNAP_USER_COMMON/common.txt
>> --------------
>> grep -F audit syslog
>>
>> Aug  2 08:34:16 vb kernel: [ 2622.276193] audit: type=1400
>> audit(1470116056.762:34): apparmor="ALLOWED" operation="mkdir"
>> profile="snap.test2.test2" name="/home/vasilisc/snap/test2/common/"
>> pid=4971 comm="mkdir" requested_mask="c" denied_mask="c" fsuid=1000
>> ouid=1000
>
> Hey Vasilisc,
>
> where do you see an error in the above trace? Apparmor says "ALLOWED",
> so the mkdir call wasn't blocked and work as expected, or did you notice
> not having this directory and file created after those calls?
>
> Didier
ALLOWED because snap package installed --devmode

without --devmode

Aug  2 08:57:36 vb kernel: [ 4022.034692] audit: type=1400 
audit(1470117456.515:40): apparmor="DENIED" operation="mkdir" 
profile="snap.test2.test2" name="/home/vasilisc/snap/test2/common/" 
pid=5539 comm="mkdir" requested_mask="c" denied_mask="c" fsuid=1000 
ouid=1000



-- 
Best regards,
vasilisc