group.of.nepali.translators team mailing list archive

[Michael Vogt <michael.vogt@xxxxxxxxxxxxx>]

** Changed in: snapd (Ubuntu)
       Status: Confirmed => Fix Released

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1634236

Title:
  [SRU] Dependency on snap-confine too weak

Status in snapd package in Ubuntu:
  Fix Released
Status in snapd source package in Xenial:
  Fix Released
Status in snapd source package in Yakkety:
  Fix Released

Bug description:
  Trivial SRU of snapd that adds a missing versioned dependency for
  snap-confine to snapd.

  It turns out there is a regression because of this if:
  - you use an armhf architecture
  - snapd 2.16
  - snap-confine < 1.0.43

  The reason is that with snapd 2.16 we use the "snap run" to start applications. This is a command written in go. On armhf the auxv vector content is critical for successfully running go commands.
  But apparmor cleans that by default because it might be dangerous.
  On snap-confine 1.0.43 we added an apparmor rule to relax this.

  TEST CASE:
  - install snapd 2.16 on an armhf/classic system (e.g. pi2)
  - make sure you have snap-confine from xenial (not from xenial-updates): 1.0.38
  - snap install hello
  - run "hello" and verify it does not run
  - install snap-confine from xenial-updates (1.0.43)
  - verify that "hello" does run now

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1634236/+subscriptions