Qt 5.10 + linkat denials = broken KDE snaps

Note that seccomp complain mode is now implemented for kernels that support it (notice that the seccomp violations all list ‘success=yes’). This does not explain the -2 return.

Is it possible that an okular process was started and continued to run when you did a snap install --dangerous /path/to/new/okular/snap? If so, do things work correctly after you kill all okular processes and then start them anew?

If not, can you paste the following:

  • the output of snap version
  • the contents of /var/lib/snapd/apparmor/profiles/snap.okular.okular
  • the contents of /var/lib/snapd/seccomp/bpf/snap.okular.okular.src