group.of.nepali.translators team mailing list archive

[Jamie Strandboge <jamie@xxxxxxxxxx>]

Most of the fix for this landed in 2.23, but the policy changes were
reverted until https://github.com/snapcore/snapd/pull/2810 is merged. In
other words, this bug is not Fix Committed and there is no need to test
that this is fixed.

** Changed in: snapd (Ubuntu Trusty)
       Status: Fix Committed => Triaged

** Changed in: snapd (Ubuntu Xenial)
       Status: Fix Committed => Triaged

** Changed in: snapd (Ubuntu Yakkety)
       Status: Fix Committed => Triaged

** Changed in: snappy
       Status: Fix Committed => In Progress

** Changed in: snapd (Ubuntu)
       Status: Fix Released => Triaged

** Tags removed: verification-needed

-- 
You received this bug notification because you are a member of नेपाली
भाषा समायोजकहरुको समूह, which is subscribed to Xenial.
Matching subscriptions: Ubuntu 16.04 Bugs
https://bugs.launchpad.net/bugs/1626359

Title:
  Cannot authorise quotactl syscall for Q_GETQUOTA

Status in Snappy:
  In Progress
Status in snapd package in Ubuntu:
  Triaged
Status in snapd source package in Trusty:
  Triaged
Status in snapd source package in Xenial:
  Triaged
Status in snapd source package in Yakkety:
  Triaged

Bug description:
  While debugging a snap I get this security error

  ```
  = Seccomp =
  Time: Sep 22 03:54:47
  Log: auid=4294967295 uid=0 gid=0 ses=4294967295 pid=12869 comm="transmission-da" exe="/snap/transmission/x1/bin/transmission-daemon" sig=31 arch=c000003e 179(quotactl) compat=0 ip=0x7fa06ab2d3fa code=0x0
  Syscall: quotactl
  ```

  There is no workaround given, so I've added a security override, but
  it doesn't do anything.

  ```
    transmission-daemon:
      command: transmission-init start
      stop-command: transmission-init stop
      daemon: forking
      plugs: [network, network-bind, quotactl]

  ...

  
  plugs:
    quotactl:
      command: binary
      security-override:
        syscalls: [quotactl]
  ```

  There doesn't seem to be a ready-made interface loaded at install time
  which would include that syscall, so I can't find a solution for that
  problem.

To manage notifications about this bug go to:
https://bugs.launchpad.net/snappy/+bug/1626359/+subscriptions