We wrote our own loader for another case (specifically for openSUSE Tumbleweed) but we need cooperation from Ikey or other people that can upload the snapd package to achieve this. We plan to ship our own loader in case this problem persists. In either case it is a solus-specific bug that the profiles somehow are not loaded across reboots. Ideally it would be proposed upstream to the apparmor project but I don’t know if the Solus project is interested that just now.
Since it’s a solus-specific invention we don’t do regression testing against it. Run the following command in your terminal: snap install spotify If you run another Linux distribution than Ubuntu, first see for how to install snap, then run the command above.
This is exactly what the aa-lsm-hooks does. Snap If you don’t have access or don’t want to use Ubuntu Software, it is possible to install Spotify from the command line with snap. When a system reboots something needs to take all of the existing profiles, compile and load them. This is done by snapd when you install a snap but the kernel doesn’t remember that across reboots. The thing is, those profiles do nothing unless they are compiled and loaded into the kernel. Old-school classic packages have their apparmor profiles (very few do) in /etc/apparmor.d, all of the snap applications have their profiles stored in /var/lib/snapd/apparmor/profiles. Apparmor profiles are text files that just sit on your disk. The way this works is that Ikey has shifted the responsibility of loading apparmor profiles from the rvice (a systemd unit that runs a bunch of shell scripts) into the aa-lsm-hooks project, which is written in C and does exactly what the old code did but with more tight code and error handling.Īs to what happens when either of those things run. I ran the code from master so I may have seen a newer version.
0 kommentar(er)
