Snap-confine has elevated permissions and is not confined but should be. Refusing to continue to avoid permission escalation attacks

Yes. I believe @zyga-snapd is looking into this as there are other reports.

Rather than reinstalling, you should be able to work around this by performing:

$ sudo apparmor_parser -r /etc/apparmor.d/*snap-confine*

This will make snap-confine run ‘confined’ (until the bug pops up again).

2 Likes