wrappers/editor: workaround Apparmor unpriv userns mediation

Signed-off-by: Simon Deziel <[email protected]>
canonical · Oct 6, 2023 · e17a59a · e17a59a
1 parent f283052
commit e17a59a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/snapcraft/wrappers/editor b/snapcraft/wrappers/editor
@@ -16,7 +16,8 @@ run_cmd() {
 }
 
 USERNS=1
-[ -e /proc/sys/kernel/unprivileged_userns_clone ] && grep -q 0 /proc/sys/kernel/unprivileged_userns_clone && USERNS=0
+[ -e /proc/sys/kernel/unprivileged_userns_clone ] && grep -qxF 0 /proc/sys/kernel/unprivileged_userns_clone && USERNS=0
+[ -e /proc/sys/kernel/apparmor_restrict_unprivileged_userns ] && grep -qxF 1 /proc/sys/kernel/apparmor_restrict_unprivileged_userns && USERNS=0
 
 find_and_spawn() {
     for path in / /usr/ /usr/local/; do