Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When using custom 4.13.9 kernel, cannot run snap applications like yakyak #16

Open
sundarnagarajan opened this issue Oct 27, 2017 · 4 comments

Comments

@sundarnagarajan
Copy link
Owner

To reproduce:

  • Use custom kernel 4.13.9 as created using make_rdp_iso.sh
  • Run sudo snap install yakyak
  • Run yakyak
    Will see error message:
snap-confine has elevated permissions and is not confined but should be. Refusing to continue to avoid permission escalation attacks
@sundarnagarajan
Copy link
Owner Author

@sundarnagarajan
Copy link
Owner Author

sundarnagarajan commented Oct 27, 2017

Reported here relating to Anbox. From one of the replies:

I guess the reason here is that the snap-confine binary in Ubuntu has AppArmor support enabled but your kernel from GalliumOS misses certain patches to confine snaps properly. All pending AppArmor patches are meant to land in the 4.14 upstream release of the kernel. So as long as that isn't out your only option is to switch to an Ubuntu based kernel on an Ubuntu based operating system

That should probably be: 'your only option is to switch to an Ubuntu compiled kernel'
Pity Ubuntu doesn't release 4.13 kernels for Xenial Xerus 16.04 (They do have their mainline kernel repository , but I hear that those kernels don't work with snap-confine either! The Ubuntu mainline kernel builds are described in more detail here.

@sundarnagarajan
Copy link
Owner Author

Using instructions from this discussion, I was able to get yakyak to work.

* Navigate to /snap/APPNAME/current/
* Find launch binary
* Run the launch binary

Worked for yakyak snap application, on kernel 4.14.6

@sundarnagarajan
Copy link
Owner Author

Can also directly launch snap application using full path - e.g. for yakyak:
/snap/yakyak/current/yakyak

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant