group.of.nepali.translators team mailing list archive

[Launchpad Bug Tracker <1572463@xxxxxxxxxxxxxxxxxx>]

This bug was fixed in the package snapd - 2.0.3

---------------
snapd (2.0.3) xenial; urgency=medium

  * New upstream micro release:
    - integration-tests, debian/tests: add unity snap autopkg test
    - snappy: introduce first feature flag for assumes: common-data-dir
    - timeout,snap: add YAML unmarshal function for timeout.Timeout
    - many: go into state.Retry state when unmounting a snap fails.
      (LP: #1571721, #1575399)
    - daemon,client,cmd/snap: improve output after snap
      install/refresh/remove (LP: #1574830)
    - integration-tests, debian/tests: add test for home interface
    - interfaces,overlord: support unversioned data
    - interfaces/builtin: improve the bluez interface
    - cmd: don't include the unit tests when building with go test -c
      for integration tests
    - integration-tests: teach some new trick to the fake store,
      reenable the app refresh test
    - many: move with some simplifications test snap building to
      snap/snaptest
    - asserts: define type for revision related errors
    - snap/snaptest,daemon,overlord/ifacestate,overlord/snapstate: unify
      mocking snaps behind MockSnap
    - snappy: fix openSnapFile's handling of sideInfo
    - daemon: improve snap sideload form handling
    - snap: add short and long description to the man-page
      (LP: #1570280)
    - snappy: remove unused SetProperty
    - snappy: use more accurate test data
    - integration-tests: add a integration test about remove removing
      all revisions
    - overlord/snapstate: make "snap remove" remove all revisions of a
      snap (LP: #1571710)
    - integration-tests: re-enable a bunch of integration tests
    - snappy: remove unused dbus code
    - overlord/ifacestate: fix setup-profiles to use new snap revision
      for setup (LP: #1572463)
    - integration-tests: add regression test for auth bug LP:#1571491
    - client, snap: remove obsolete TypeCore which was used in the old
      SystemImage days
    - integration-tests: add apparmor test
    - cmd: don't perform type assertion when we know error to be nil
    - client: list correct snap types
    - intefaces/builtin: allow getsockname on connected x11 plugs
      (LP: #1574526)
    - daemon,overlord/snapstate: read name out of sideloaded snap early,
      improved change summary
    - overlord: keep tasks unlinked from a change hidden, prune them
    - integration-tests: snap list on fresh boot is good again
    - integration-tests: add partial term to the find test
    - integration-tests: changed default release to 16
    - integration-tests: add regression test for snaps not present after
      reboot
    - integration-tests: network interface
    - integration-tests: add proxy related environment variables to
      snapd env file
    - README.md: snappy => snap
    - etc: trivial typo fix (LP:#1569892)
    - debian: remove unneeded /var/lib/snapd/apparmor/additional
      directory (LP: #1569577)

 -- Michael Vogt <michael.vogt@xxxxxxxxxx>  Tue, 03 May 2016 07:51:57
+0200

** Changed in: snapd (Ubuntu Xenial)
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1572463

Title:
  setup-profile configures security based on snap.Info from
  DisconnectSnap, which still sees older revision

Status in Snappy:
  Fix Committed
Status in snapd package in Ubuntu:
  Fix Committed
Status in snapd source package in Xenial:
  Fix Released

Bug description:
  When the same snap is sideloaded two times the security profile stops
  working:

  ```
  $ sudo snap install youtube-dl_2016.03.27_amd64.snap
  [\] Setup snap "youtube-dl" security profiles
  $ youtube-dl.run
  WARNING: Assuming --restrict-filenames since file system encoding cannot encode all characters. Set the LC_ALL environment variable to fix this.
  Usage: youtube-dl [OPTIONS] URL [URL...]

  youtube-dl: error: You must provide at least one URL.
  Type youtube-dl --help to see a list of all options.

  $ sudo snap install youtube-dl_2016.03.27_amd64.snap
  [-] Copy snap "youtube-dl" data
  $ youtube-dl.run
  /bin/sh: 0: Can't open /snap/youtube-dl/100002/command-run.wrapper

  $ dmesg|tail -n1
  [13348.347319] audit: type=1400 audit(1461143833.011:132): apparmor="DENIED" operation="open" profile="snap.youtube-dl.run" name="/snap/youtube-dl/100002/command-run.wrapper" pid=28849 comm="command-run.wra" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

  $ grep SNAP_REVISION}= /var/lib/snapd/apparmor/profiles/snap.youtube-dl.run
  @{SNAP_REVISION}="100001"
  ```

  $ snap changes|grep sideload
  6    Done    2016-04-20T09:17:02Z  2016-04-20T09:17:03Z  Install "/tmp/snapd-sideload-pkg-620395148" snap file
  7    Done    2016-04-20T09:17:10Z  2016-04-20T09:17:11Z  Install "/tmp/snapd-sideload-pkg-340731359" snap file

To manage notifications about this bug go to:
https://bugs.launchpad.net/snappy/+bug/1572463/+subscriptions