@jdstrand, can you take a look at confinement in relation to classic (that’s an app installed using classic confinement, not the ubuntu core “classic mode”), which shouldn’t be confined at all AFAIUI? Running atom I get denials from apparmor when I try to use Facebook’s “Nuclide” plugin in conjunction with the Javascript typechecker called “Flow” (again, from Facebook):
= AppArmor =
Time: Apr 12 03:44:52
Log: apparmor="DENIED" operation="file_inherit" profile="/snap/core/4443/usr/lib/snapd/snap-confine" pid=3488 comm="snap-confine" family="unix" sock_type="stream" protocol=0 requested_mask="send receive" denied_mask="send receive" addr=none peer_addr=none
= AppArmor =
Time: Apr 12 03:44:52
Log: apparmor="DENIED" operation="file_inherit" profile="/snap/core/4443/usr/lib/snapd/snap-confine" name="/dev/shm/.org.chromium.Chromium.iY5a7W" pid=3488 comm="snap-confine" requested_mask="ra" denied_mask="ra" fsuid=1000 ouid=1000
File: /dev/shm/.org.chromium.Chromium.iY5a7W (write)
Suggestions:
* adjust program to create files and directories in /dev/shm/snap.$SNAP_NAME.*
* try the snapcraft preload plugin: https://github.com/sergiusens/snapcraft-preload
= AppArmor =
Time: Apr 12 03:44:52
Log: apparmor="DENIED" operation="file_inherit" profile="/snap/core/4443/usr/lib/snapd/snap-confine" name="/dev/shm/.org.chromium.Chromium.9TVQDZ" pid=3488 comm="snap-confine" requested_mask="ra" denied_mask="ra" fsuid=1000 ouid=1000
File: /dev/shm/.org.chromium.Chromium.9TVQDZ (write)
Suggestions:
* adjust program to create files and directories in /dev/shm/snap.$SNAP_NAME.*
* try the snapcraft preload plugin: https://github.com/sergiusens/snapcraft-preload
= AppArmor =
Time: Apr 12 03:44:52
Log: apparmor="DENIED" operation="file_inherit" profile="/snap/core/4443/usr/lib/snapd/snap-confine" name="/dev/shm/.org.chromium.Chromium.4niHa2" pid=3488 comm="snap-confine" requested_mask="ra" denied_mask="ra" fsuid=1000 ouid=1000
File: /dev/shm/.org.chromium.Chromium.4niHa2 (write)
Suggestions:
* adjust program to create files and directories in /dev/shm/snap.$SNAP_NAME.*
* try the snapcraft preload plugin: https://github.com/sergiusens/snapcraft-preload
= AppArmor =
Time: Apr 12 03:44:52
Log: apparmor="DENIED" operation="file_inherit" profile="/snap/core/4443/usr/lib/snapd/snap-confine" name="/dev/shm/.org.chromium.Chromium.7SMBQ4" pid=3488 comm="snap-confine" requested_mask="ra" denied_mask="ra" fsuid=1000 ouid=1000
File: /dev/shm/.org.chromium.Chromium.7SMBQ4 (write)
Suggestions:
* adjust program to create files and directories in /dev/shm/snap.$SNAP_NAME.*
* try the snapcraft preload plugin: https://github.com/sergiusens/snapcraft-preload
= AppArmor =
Time: Apr 12 03:44:52
Log: apparmor="DENIED" operation="file_inherit" profile="/snap/core/4443/usr/lib/snapd/snap-confine" name="/dev/shm/.org.chromium.Chromium.LwUPca" pid=3488 comm="snap-confine" requested_mask="ra" denied_mask="ra" fsuid=1000 ouid=1000
File: /dev/shm/.org.chromium.Chromium.LwUPca (write)
Suggestions:
* adjust program to create files and directories in /dev/shm/snap.$SNAP_NAME.*
* try the snapcraft preload plugin: https://github.com/sergiusens/snapcraft-preload