apparmor="DENIED" operation="connect" profile="snap.prometheus-ovn-exporter.ovn-exporter" name="/run/ovn/ovnnb_db.sock" pid=120638 comm="ovn-exporter"

Bug #1960659 reported by Felipe Reyes
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
snap-prometheus-ovn-exporter
New
Undecided
Unassigned

Bug Description

Installing prometheus-ovn-exporter from the store prevents from accessing the needed files by ovn_exporter:

Feb 11 17:09:04 juju-dd035c-ussuri-9 kernel: [72900.251433] audit: type=1400 audit(1644599344.035:65561): apparmor="DENIED" operation="open" profile="snap.prometheus-ovn-exporter.ovn-exporter" name="/run/ovn/ovnsb_db.pid" pid=120638 comm="ovn-exporter" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Feb 11 17:09:04 juju-dd035c-ussuri-9 kernel: [72900.252645] audit: type=1400 audit(1644599344.035:65562): apparmor="DENIED" operation="open" profile="snap.prometheus-ovn-exporter.ovn-exporter" name="/run/ovn/ovnnb_db.pid" pid=120638 comm="ovn-exporter" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
Feb 11 17:09:04 juju-dd035c-ussuri-9 kernel: [72900.253252] audit: type=1400 audit(1644599344.035:65563): apparmor="DENIED" operation="open" profile="snap.prometheus-ovn-exporter.ovn-exporter" name="/run/ovn/ovn-northd.pid" pid=120638 comm="ovn-exporter" requested_mask="r" denied_mask="r" fsuid=0 ouid=0

Feb 11 17:09:04 juju-dd035c-ussuri-9 kernel: [72900.259060] audit: type=1400 audit(1644599344.043:65569): apparmor="DENIED" operation="connect" profile="snap.prometheus-ovn-exporter.ovn-exporter" name="/run/ovn/ovnnb_db.sock" pid=120638 comm="ovn-exporter" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0
Feb 11 17:09:04 juju-dd035c-ussuri-9 kernel: [72900.259366] audit: type=1400 audit(1644599344.043:65570): apparmor="DENIED" operation="connect" profile="snap.prometheus-ovn-exporter.ovn-exporter" name="/run/ovn/ovnnb_db.sock" pid=120638 comm="ovn-exporter" requested_mask="wr" denied_mask="wr" fsuid=0 ouid=0

Revision history for this message
Felipe Reyes (freyes) wrote :

As a workaround, I changed the confinement to classic

charm changes: https://paste.ubuntu.com/p/xnfqVN5HzG/
snap changes: https://paste.ubuntu.com/p/Qj7Khg3fX7/

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.