apparmor="DENIED" with ecrypted Home directory

[Jamie Strandboge]

On Tue, 2016-06-14 at 23:34 +0200, Jian LUO wrote:
> Hi,
> 
> I got these error in a new xenial installation on my laptop.
> 
> daniel at virgo:~$ pciutils.lspci ; journalctl | tail -n3
> failed to create user data directory. errmsg: Permission denied
> Jun 14 23:02:23 virgo audit[7661]: AVC apparmor="DENIED" operation="open"
> profile="/usr/bin/ubuntu-core-launcher"
> name="/home/.ecryptfs/daniel/.Private/" pid=7661 comm="ubuntu-core-lau"
> requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
> Jun 14 23:02:23 virgo kernel: audit: type=1400 audit(1465938143.001:272):
> apparmor="DENIED" operation="open" profile="/usr/bin/ubuntu-core-launcher"
> name="/home/.ecryptfs/daniel/.Private/" pid=7661 comm="ubuntu-core-lau"
> requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
> Jun 14 23:02:23 virgo kernel: ecryptfs_dir_open: Error attempting to
> initialize the lower file for the dentry with name [/]; rc = [-13]
> 
> I've tested with atom, hello-world and pciutils from the store w/ or w/o
> --devmode.
> 
> Google search leads me to these two Bugs #359338 [1] and #1574526 [2]. But
> doubt that this one is also related. Should I fire a new one?
> 
This is the open bug:
https://bugs.launchpad.net/snappy/+bug/1574556

It should be fixed soon-- it is fixed in 16.10 and a 16.04 upload (with quite a
few other changes) is coming.


> Jian
> ---
> daniel at virgo:~$ uname -a ; dpkg -l snapd|tail -n1
> Linux virgo 4.4.0-24-generic #43-Ubuntu SMP Wed Jun 8 19:27:37 UTC 2016
> x86_64 x86_64 x86_64 GNU/Linux
> ii  snapd          2.0.8        amd64        Tool to interact with Ubuntu
> Core Snappy.
> 
> daniel at virgo:~$ snap list
> Name         Version               Rev  Developer  Notes
> atom-cwayne  1.9.0                 1    cwayne18   devmode
> hello-world  6.1                   26   canonical  -
> pciutils     3.3.1-1               1    woodrow    devmode
> ubuntu-core  16.04+20160531.11-56  122  canonical  -
> 
> [1] https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/
> [2] https://bugs.launchpad.net/snappy/+bug/1574526
> -- 
> Snapcraft mailing list
> Snapcraft at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/s
> napcraft
-- 
Jamie Strandboge             | http://www.canonical.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/snapcraft/attachments/20160615/4bc7be28/attachment.sig>