wrappers/remote-viewer: workaround Apparmor unpriv userns mediation

Signed-off-by: Simon Deziel <[email protected]>
canonical · Oct 6, 2023 · 70ad2cd · 70ad2cd
1 parent e17a59a
commit 70ad2cd
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/snapcraft/wrappers/remote-viewer b/snapcraft/wrappers/remote-viewer
@@ -15,7 +15,8 @@ run_cmd() {
 }
 
 USERNS=1
-[ -e /proc/sys/kernel/unprivileged_userns_clone ] && grep -q 0 /proc/sys/kernel/unprivileged_userns_clone && USERNS=0
+[ -e /proc/sys/kernel/unprivileged_userns_clone ] && grep -qxF 0 /proc/sys/kernel/unprivileged_userns_clone && USERNS=0
+[ -e /proc/sys/kernel/apparmor_restrict_unprivileged_userns ] && grep -qxF 1 /proc/sys/kernel/apparmor_restrict_unprivileged_userns && USERNS=0
 
 find_and_spawn() {
     for path in / /usr/ /usr/local/; do