Thanks for pointing me in the right direction.
I have started to add plugs and slots:
version: "0.0"
summary: Add support for Samba
description: Samba support (Windows share)
grade: devel
confinement: devmode
plugs:
** dbus-systemd-smbd:**
** interface: dbus**
** bus: system**
** name: org.freedesktop.systemd1**
slots:
** dbus-systemd-smbd:**
** interface: dbus**
** bus: system**
** name: org.freedesktop.systemd1**
apps:
** samba:**
** command: etc/init.d/samba start**
** daemon: simple**
** restart-condition: always**
** plugs:**
** [mount-observe, network, network-bind, removable-media, system-observe]**
parts:
** samba:**
** plugin: nil**
** stage-packages: [ samba, lsb-base, ncurses-base, systemd, coreutils, dpkg ]**
** stage:**
** - -etc/init.d/* # exclude the content under init.d that we will override**
** - -usr/share/samba/smb.conf # Exclude the default samba config**
** config:**
** plugin: dump**
** source: .**
** organize:**
** overrides/etc: etc**
** overrides/usr: usr**
** prime:**
** - etc**
** - usr**
and have narrowed down the list from journalctl:
Nov 21 13:48:47 vagrant kernel: audit: type=1400 audit(1542808127.884:17119): apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/proc/12808/mounts" pid=12808 comm=“python2.7” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=1000
Nov 21 13:48:48 vagrant audit[12818]: AVC apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/run/samba/" pid=12818 comm=“install” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
Nov 21 13:48:48 vagrant kernel: audit: type=1400 audit(1542808128.060:17120): apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/run/samba/" pid=12818 comm=“install” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
Nov 21 13:48:48 vagrant audit[12819]: AVC apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/run/samba/smbd.pid" pid=12819 comm=“start-stop-daem” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
Nov 21 13:48:48 vagrant kernel: audit: type=1400 audit(1542808128.060:17121): apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/run/samba/smbd.pid" pid=12819 comm=“start-stop-daem” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
Nov 21 13:48:48 vagrant audit[12819]: AVC apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/proc/sys/kernel/core_pattern" pid=12819 comm=“smbd” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
Nov 21 13:48:48 vagrant kernel: audit: type=1400 audit(1542808128.084:17122): apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/proc/sys/kernel/core_pattern" pid=12819 comm=“smbd” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
Nov 21 13:49:34 vagrant audit[840]: USER_AVC pid=840 uid=107 auid=4294967295 ses=4294967295 msg='apparmor=“ALLOWED” operation=“dbus_method_call” bus=“system” path="/org/freedesktop/systemd1/unit/smbd_2eservice" interface=“org.freedesktop.DBus.Properties” member=“GetAll” mask=“send” name=“org.freedesktop.systemd1” pid=12841 label=“snap.my-samba.samba” peer_pid=1 peer_label="unconfined"
Nov 21 13:49:34 vagrant kernel: audit: type=1107 audit(1542808174.056:17123): pid=840 uid=107 auid=4294967295 ses=4294967295 msg='apparmor=“ALLOWED” operation=“dbus_method_call” bus=“system” path="/org/freedesktop/systemd1/unit/smbd_2eservice" interface=“org.freedesktop.DBus.Properties” member=“GetAll” mask=“send” name=“org.freedesktop.systemd1” pid=12841 label=“snap.my-samba.samba” peer_pid=1 peer_label="unconfined"
Nov 21 13:49:34 vagrant audit[12844]: AVC apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/proc/12844/mounts" pid=12844 comm=“python2.7” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=1000
Nov 21 13:49:34 vagrant kernel: audit: type=1400 audit(1542808174.156:17124): apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/proc/12844/mounts" pid=12844 comm=“python2.7” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=1000
Nov 21 13:49:34 vagrant audit[12854]: AVC apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/run/samba/" pid=12854 comm=“install” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
Nov 21 13:49:34 vagrant audit[12855]: AVC apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/run/samba/smbd.pid" pid=12855 comm=“start-stop-daem” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
Nov 21 13:49:34 vagrant kernel: audit: type=1400 audit(1542808174.332:17125): apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/run/samba/" pid=12854 comm=“install” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
Nov 21 13:49:34 vagrant kernel: audit: type=1400 audit(1542808174.332:17126): apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/run/samba/smbd.pid" pid=12855 comm=“start-stop-daem” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
Nov 21 13:49:34 vagrant audit[12855]: AVC apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/proc/sys/kernel/core_pattern" pid=12855 comm=“smbd” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
Nov 21 13:49:34 vagrant kernel: audit: type=1400 audit(1542808174.356:17127): apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/proc/sys/kernel/core_pattern" pid=12855 comm=“smbd” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
And snappy-debug:
kernel.printk_ratelimit = 0
kernel.printk_ratelimit = 5
= AppArmor =
Time: Nov 21 13:36:29
Log: apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/run/samba/" pid=12590 comm=“install” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
File: /run/samba/ (read)
Suggestions:
*** adjust program to use $SNAP_DATA**
*** adjust program to use /run/shm/snap.$SNAP_NAME.***
= AppArmor =
Time: Nov 21 13:36:29
Log: apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/run/samba/smbd.pid" pid=12591 comm=“start-stop-daem” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
File: /run/samba/smbd.pid (read)
Suggestions:
*** adjust program to use $SNAP_DATA**
*** adjust program to use /run/shm/snap.$SNAP_NAME.***
= AppArmor =
Time: Nov 21 13:36:29
Log: apparmor=“ALLOWED” operation=“open” profile=“snap.my-samba.samba” name="/proc/sys/kernel/core_pattern" pid=12591 comm=“smbd” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
File: /proc/sys/kernel/core_pattern (read)
Suggestion:
*** adjust program to not access ‘@{PROC}/sys/kernel/core_pattern’**
I still have the same error using strace though. Any pointers you can give me?
Regards,
Daniel