Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

snap: AppArmor spam in dmesg #115

Open
danunahui opened this issue Nov 19, 2021 · 2 comments
Open

snap: AppArmor spam in dmesg #115

danunahui opened this issue Nov 19, 2021 · 2 comments

Comments

@danunahui
Copy link

danunahui commented Nov 19, 2021 •
edited
Loading 

$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description:    Ubuntu 21.10
Release:        21.10
Codename:       impish

$ snap info bitcoin-core
snap-id:      lGr3hNoqLtHTp2yV1BgnqyElQtLUDPeA
tracking:     latest/stable
refresh-date: 2 days ago, at 05:23 +05
...
installed:          22.0              (99) 107MB -

Each minute:

[Fri Nov 19 11:02:18 2021] audit: type=1400 audit(1637301739.161:950): apparmor="DENIED" operation="open" profile="snap.bitcoin-core.daemon" name="/proc/diskstats" pid=27297 comm="b-scheduler" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Fri Nov 19 11:02:18 2021] audit: type=1400 audit(1637301739.161:951): apparmor="DENIED" operation="open" profile="snap.bitcoin-core.daemon" name="/proc/vmstat" pid=27297 comm="b-scheduler" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Fri Nov 19 11:02:18 2021] audit: type=1400 audit(1637301739.161:952): apparmor="DENIED" operation="open" profile="snap.bitcoin-core.daemon" name="/proc/schedstat" pid=27297 comm="b-scheduler" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Fri Nov 19 11:02:18 2021] audit: type=1400 audit(1637301739.161:953): apparmor="DENIED" operation="open" profile="snap.bitcoin-core.daemon" name="/proc/zoneinfo" pid=27297 comm="b-scheduler" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Fri Nov 19 11:02:18 2021] audit: type=1400 audit(1637301739.161:954): apparmor="DENIED" operation="open" profile="snap.bitcoin-core.daemon" name="/proc/softirqs" pid=27297 comm="b-scheduler" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
[Fri Nov 19 11:02:18 2021] audit: type=1400 audit(1637301739.161:955): apparmor="DENIED" operation="open" profile="snap.bitcoin-core.daemon" name="/proc/27297/schedstat" pid=27297 comm="b-scheduler" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000

probably because of /src/randomenv.cpp
@fanquake fanquake mentioned this issue Jan 23, 2024
Closed
@Javihache
Copy link

Is there a way to fix this?

@BrunswickBTC
Copy link

Yes, but it seems nobody cares

fanquake added a commit to fanquake/bitcoin that referenced this issue Oct 25, 2024
@fanquake
randomenv: remove /proc/ access
b08958d 
The data we try and gather in this file is on a best-effort basis,
however in this instance, for certain users, it's just producing spam.
This could (possibly?) be solved with further snap/apparmor
configuration, however given that no-one is actively working on
packaging, it seems easier to drop this (one of many), sources of
dynamic environment data.

Closes bitcoin-core/packaging#115.
fanquake added a commit to fanquake/bitcoin that referenced this issue Oct 25, 2024
@fanquake
randomenv: remove /proc/ access
9786eb2 
The data we try and gather in this file is on a best-effort basis,
however in this instance, for certain users, it's just producing spam.
This could (possibly?) be solved with further snap/apparmor
configuration, however given that no-one is actively working on
packaging, we could instead drop this (one of many), sources of
dynamic environment data.

Closes bitcoin-core/packaging#115.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@danunahui @Javihache @BrunswickBTC