[Bug 1926442] Re: cannot execute 'netplan generate' from within a snap

[Lukas Märdian]

The new io.netplan.Netplan.Generate() DBus API has been implemented in netplan upstream:
https://github.com/canonical/netplan/pull/208
https://github.com/canonical/netplan/pull/209

It needs to be released and SRUed down to Bionic for the snapd change to
be accepted (https://github.com/snapcore/snapd/pull/10212)

** Also affects: netplan.io (Ubuntu)
   Importance: Undecided
       Status: New

** Changed in: netplan.io (Ubuntu)
       Status: New => In Progress

** Also affects: netplan.io (Ubuntu Hirsute)
   Importance: Undecided
       Status: New

** Also affects: netplan.io (Ubuntu Focal)
   Importance: Undecided
       Status: New

** Also affects: netplan.io (Ubuntu Impish)
   Importance: Undecided
       Status: In Progress

** Also affects: netplan.io (Ubuntu Bionic)
   Importance: Undecided
       Status: New

** Also affects: netplan.io (Ubuntu Groovy)
   Importance: Undecided
       Status: New

** Summary changed:

- cannot execute 'netplan generate' from within a snap
+ [SRU] cannot execute 'netplan generate' from within a snap

** Tags added: fr-1382

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to netplan.io in Ubuntu.
Matching subscriptions: foundations-bugs
https://bugs.launchpad.net/bugs/1926442

Title:
  [SRU] cannot execute 'netplan generate' from within a snap

Status in Snappy:
  Confirmed
Status in netplan.io package in Ubuntu:
  In Progress
Status in netplan.io source package in Bionic:
  New
Status in netplan.io source package in Focal:
  New
Status in netplan.io source package in Groovy:
  New
Status in netplan.io source package in Hirsute:
  New
Status in netplan.io source package in Impish:
  In Progress

Bug description:
  A snap, connected to the 'network-setup-control' interface can edit
  files in /etc/netplan/ but it is not able to execute 'netplan
  generate' command successfully.

  A call to '/usr/sbin/netplan generate' fails with apparmor errors like this:
  [  529.034756] audit: type=1400 audit(1619611886.273:702): apparmor="DENIED" operation="exec" profile="snap.network-manager.networkmanager" name="/usr/lib/netplan/generate" pid=15227 comm="netplan" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
  Apr 28 12:13:55 foobar network-manager.networkmanager[2280]: PermissionError: [Errno 13] Permission denied: '/lib/netplan/generate

  It looks like the Python wrapper for netplan (in /usr/sbin/netplan) is
  whitelisted, but the actual netplan generator (in
  /usr/lib/netplan/generate) is not.

To manage notifications about this bug go to:
https://bugs.launchpad.net/snappy/+bug/1926442/+subscriptions