Lxc : snap-confine has elevated permissions and is not confined but should be

snapd
1

I am getting following problem. How to troubleshoot ?

$ lxc list
snap-confine has elevated permissions and is not confined but should be. Refusing to continue to avoid permission escalation attacks
Please make sure that the snapd.apparmor service is enabled and started.

$sudo systemctl status apparmor
[sudo] password for jobin: 
● apparmor.service - Load AppArmor profiles
     Loaded: loaded (/lib/systemd/system/apparmor.service; enabled; vendor preset: enabled)
     Active: active (exited) since Mon 2023-03-20 19:27:44 IST; 1h 25min ago
       Docs: man:apparmor(7)
             https://gitlab.com/apparmor/apparmor/wikis/home/
   Main PID: 1526 (code=exited, status=0/SUCCESS)

Mar 20 19:27:44 jobin-laptop systemd[1]: Starting Load AppArmor profiles...
Mar 20 19:27:44 jobin-laptop apparmor.systemd[1526]: Restarting AppArmor
Mar 20 19:27:44 jobin-laptop apparmor.systemd[1526]: Reloading AppArmor profiles
Mar 20 19:27:44 jobin-laptop apparmor.systemd[1561]: Skipping profile in /etc/apparmor.d/disable: usr.sbin.rsyslogd
Mar 20 19:27:44 jobin-laptop systemd[1]: Finished Load AppArmor profiles.
Mar 20 20:00:58 jobin-laptop systemd[1]: Reloading Load AppArmor profiles...
Mar 20 20:00:58 jobin-laptop apparmor.systemd[16048]: Restarting AppArmor
Mar 20 20:00:58 jobin-laptop apparmor.systemd[16048]: Reloading AppArmor profiles
Mar 20 20:00:58 jobin-laptop apparmor.systemd[16074]: Skipping profile in /etc/apparmor.d/disable: usr.sbin.rsyslogd
Mar 20 20:00:58 jobin-laptop systemd[1]: Reloaded Load AppArmor profiles.

$sudo systemctl status snapd.apparmor ● snapd.apparmor.service - Load AppArmor profiles managed internally by snapd Loaded: loaded (/lib/systemd/system/snapd.apparmor.service; enabled; vendor preset: enabled) Active: active (exited) since Mon 2023-03-20 19:27:44 IST; 1h 28min ago Main PID: 1565 (code=exited, status=0/SUCCESS)

Mar 20 19:27:44 jobin-laptop systemd[1]: Starting Load AppArmor profiles managed internally by snapd… Mar 20 19:27:44 jobin-laptop systemd[1]: Finished Load AppArmor profiles managed internally by snapd.

2

what is the full output of snap version so we all know what system (and kernel) you are on …

3

Thank you for looking into my trouble. @ogra here is the information you requested

jobin:~$snap --version
snap    2.58.2
snapd   2.58.2
series  16
ubuntu  22.04
kernel  5.19.0-35-generic
jobin:~$cat /etc/*release
DISTRIB_ID=Ubuntu
DISTRIB_RELEASE=22.04
DISTRIB_CODENAME=jammy
DISTRIB_DESCRIPTION="Ubuntu 22.04.2 LTS"
PRETTY_NAME="Ubuntu 22.04.2 LTS"
NAME="Ubuntu"
VERSION_ID="22.04"
VERSION="22.04.2 LTS (Jammy Jellyfish)"
VERSION_CODENAME=jammy
ID=ubuntu
ID_LIKE=debian
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
UBUNTU_CODENAME=jammy
jobin:~$uname -a
Linux jobin-laptop 5.19.0-35-generic #36~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Fri Feb 17 15:17:25 UTC 2 x86_64 x86_64 x86_64 GNU/Linux