Getconf LONG_BIT permission denied on core

snap install emoj --edge on classic and on core. On classic it works, on core it fails. Shouldn’t these operate in the same way? It’s failing in a bowels of a node module which does getconf LONG_BIT for some reason.

popey@localhost:~$ snap version
snap    2.32.1
snapd   2.32.1
series  16
kernel  4.4.0-116-generic
popey@localhost:~$ emoj horse
/bin/sh: 1: getconf: Permission denied
child_process.js:644
    throw err;
    ^

Error: Command failed: getconf LONG_BIT
/bin/sh: 1: getconf: Permission denied

= AppArmor =
Time: Apr 02 16:15:15
Log: apparmor="DENIED" operation="open" profile="snap.emoj.emoj" name="/dev/tty1" pid=2844 comm="node" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=1000

= AppArmor =
Time: Apr 02 16:15:16
Log: apparmor="DENIED" operation="exec" profile="snap.emoj.emoj" name="/usr/bin/getconf" pid=2856 comm="sh" requested_mask="x" denied_mask="x" fsuid=1000 ouid=0

We can fix this in the next batch of policy updates.

1 Like

FYI, https://github.com/snapcore/snapd/pull/5006

1 Like