ubuntu-phone team mailing list archive

[Chris Croome <chris@xxxxxxxxxxxxxxxxxxx>]

Hi

On Fri 17-Apr-2015 at 03:52:29PM +0200, Oliver Grawert wrote:
> > 
> > But the last command fails if I run it on the phone, with the
> > following (but it works if I ssh in):
> > 
> >   chroot: failed to run command '/bin/bash': Permission denied
> > 
> > Any hints would be appreciated.
>
> the app confinement gets in your way here, the terminal app, even
> though it has more permissions than a normal click package (which is
> why it asks you for a password), still operates inside the boundaries
> of apparmor.
>
> if you watch syslog while trying to exec a foreign shell script that
> is not in a system path you will most likely see apparmor denials. i
> also think the chroot command is specifically blocked by apparmor...

Thanks, this is what I get:

  Apr 17 14:58:02 ubuntu-phablet kernel: [ 2385.427834] type=1400 audit(1429279082.278:85): apparmor="DENIED" operation="exec" profile="com.ubuntu.developer.flscogna.terminalreboot_terminal_0.8.027" name="/home/debian/bin/bash" pid=7098 comm="chroot" requested_mask="x" denied_mask="x" fsuid=0 ouid=0

Any suggestions about how to get around this?

Also I'm not clear why I don't have this issue if I ssh into the phone
-- then I can chroot into the debian image and run apt-get update etc.

All the best

Chris

PS I'm still using terminalreboot as I could get the customisations to
   work for the default terminal client.

-- 
Webarchitects Co-operative
http://webarchitects.coop/
+44 114 276 9709
@webarchcoop