search

bitcoin-core / packaging

Distribution-specific packaging for Bitcoin Core
40 stars 40 forks source link

Snap package of bitcoind lacks apparmor access to entropy files in proc #217

Closed BrunswickBTC closed 2 months ago

BrunswickBTC commented 5 months ago

Apparmor triggers syslog messages when bitcoind attempts to access certain files in /proc In bitcoind source the following list of files appear to be accessed for entropy collection: AddFile(hasher, "/proc/diskstats"); AddFile(hasher, "/proc/vmstat"); AddFile(hasher, "/proc/schedstat"); AddFile(hasher, "/proc/zoneinfo"); AddFile(hasher, "/proc/meminfo"); AddFile(hasher, "/proc/softirqs"); AddFile(hasher, "/proc/stat"); AddFile(hasher, "/proc/self/schedstat"); AddFile(hasher, "/proc/self/status");

Snap's apparmor settings for the bitcoin-core package should be updated to permit access to these files.

lsb_release -a

No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux 12 (bookworm) Release: 12 Codename: bookworm

snap version

snap 2.60.4 snapd 2.60.4 series 16 debian 12 kernel 6.1.0-17-amd64

snap info bitcoin-core

name: bitcoin-core summary: Fully validating Bitcoin peer-to-peer network node, wallet and GUI publisher: Bitcoin Core store-url: https://snapcraft.io/bitcoin-core contact: https://github.com/bitcoin-core/packaging/issues/new?title=snap: license: unset description: | Bitcoin Core connects to the Bitcoin peer-to-peer network to download and fully validate blocks and transactions. It also includes a wallet and graphical user interface. commands:

fanquake commented 5 months ago

Is this a duplicate of #115?

BrunswickBTC commented 5 months ago

Yes

fanquake commented 2 months ago

Ok, closing as a dupe of #115.