bitcoin-core / packaging

Distribution-specific packaging for Bitcoin Core
40 stars 43 forks source link

snap: AppArmor spam in dmesg #115

Open danunahui opened 2 years ago

danunahui commented 2 years ago
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 21.10
Release:        21.10
Codename:       impish
$ snap info bitcoin-core
snap-id:      lGr3hNoqLtHTp2yV1BgnqyElQtLUDPeA
tracking:     latest/stable
refresh-date: 2 days ago, at 05:23 +05
...
installed:          22.0              (99) 107MB -

Each minute:

[Fri Nov 19 11:02:18 2021] audit: type=1400 audit(1637301739.161:950): apparmor="DENIED" operation="open" profile="snap.bitcoin-core.daemon" name="/proc/diskstats" pid=27297 comm="b-scheduler" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Fri Nov 19 11:02:18 2021] audit: type=1400 audit(1637301739.161:951): apparmor="DENIED" operation="open" profile="snap.bitcoin-core.daemon" name="/proc/vmstat" pid=27297 comm="b-scheduler" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Fri Nov 19 11:02:18 2021] audit: type=1400 audit(1637301739.161:952): apparmor="DENIED" operation="open" profile="snap.bitcoin-core.daemon" name="/proc/schedstat" pid=27297 comm="b-scheduler" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Fri Nov 19 11:02:18 2021] audit: type=1400 audit(1637301739.161:953): apparmor="DENIED" operation="open" profile="snap.bitcoin-core.daemon" name="/proc/zoneinfo" pid=27297 comm="b-scheduler" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Fri Nov 19 11:02:18 2021] audit: type=1400 audit(1637301739.161:954): apparmor="DENIED" operation="open" profile="snap.bitcoin-core.daemon" name="/proc/softirqs" pid=27297 comm="b-scheduler" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Fri Nov 19 11:02:18 2021] audit: type=1400 audit(1637301739.161:955): apparmor="DENIED" operation="open" profile="snap.bitcoin-core.daemon" name="/proc/27297/schedstat" pid=27297 comm="b-scheduler" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000

probably because of /src/randomenv.cpp

Javihache commented 1 month ago

Is there a way to fix this?

BrunswickBTC commented 2 weeks ago

Yes, but it seems nobody cares