Cliqz Snap

Chris cpollock at embarqmail.com
Sun Nov 13 18:04:05 UTC 2016


On Sun, 2016-11-13 at 09:17 -0600, Chris wrote:
> On Sun, 2016-11-13 at 10:41 +0800, XiaoGuo Liu wrote:
> > 
> > Hi Chris,
> > 
> > You may find the tips at https://github.com/snapcore/snapd/wiki/Sec
> > ur
> > ity. You may use the command like:
> > 
> > $ scmp_sys_resolver 983045
> > set_tls
> > to find out the security violation.
> > 
> > Best regards,
> > XiaoGuo
> > 
> Thank you XiaoGuo, so in my case I have syscall=272. Running 
> 
> chris at localhost:~$ scmp_sys_resolver 272
> unshare
> 
> I've installed snappy-debug but can't seem to get any kind of output
> when run. Maybe I'm using the wrong commands?
> 
Replying to my own post. I wasn't running the snap whenever I ran

sudo snappy-debug.security scanlog --all-entries cliqz

Once I executed the snap from the menu with the above running I got

chris at localhost:~$ sudo snappy-debug.security scanlog --all-entries
cliqz
kernel.printk_ratelimit = 0
= Seccomp =
Time: Nov 13 11:49:59
Log: auid=1000 uid=1000 gid=1000 ses=3 pid=29796 comm="cliqz"
exe="/snap/cliqz/6/opt/CLIQZ/CLIQZ" sig=31 arch=c000003e 272(unshare)
compat=0 ip=0x7ffacd899c19 code=0x0
Syscall: unshare

So, now it seems as there is a seccomp violation stopping the snap from
running, at least that's what it appears to me to be. Where would I go
from here? Contact the snap author?

Chris

> > 
> > On Sun, Nov 13, 2016 at 7:13 AM, Chris <cpollock at embarqmail.com>
> > wrote:
> > > 
> > > Has anyone gotten this snap to run? The install went fine AFAICT
> > > but
> > > when executed nothing happens. Syslog shows
> > > 
> > > Nov 12 17:00:55 localhost /usr/lib/snapd/snapd[844]:
> > > daemon.go:174:
> > > DEBUG: uid=1000;@ GET /v2/snaps 31.184976ms 200
> > > 
> > > Nov 12 17:00:55 localhost kernel: [250160.993225] audit:
> > > type=1326
> > > audit(1478991655.666:65): auid=1000 uid=1000 gid=1000 ses=3
> > > pid=10201
> > > comm="cliqz" exe="/snap/cliqz/6/opt/CLIQZ/CLIQZ" sig=31
> > > arch=c000003e
> > > syscall=272 compat=0 ip=0x7f5d82721c19 code=0x0
> > > 
> > > When executed from the cli
> > > 
> > > chris at localhost:~$ cliqz
> > > Bad system call
> > > 
> > > --
> > > Chris
> > > KeyID 0xE372A7DA98E6705C
> > > 31.11972; -97.90167 (Elev. 1092 ft)
> > > 16:59:51 up 2 days, 21:28, 1 user, load average: 0.32, 0.37, 0.36
> > > Ubuntu 16.04.1 LTS, kernel 4.4.0-47-generic #68-Ubuntu SMP Wed
> > > Oct
> > > 26 19:39:52 UTC 2016
> > > 
> > > --
> > > Snapcraft mailing list
> > > Snapcraft at lists.snapcraft.io
> > > Modify settings or unsubscribe at: https://lists.ubuntu.com/mailm
> > > an
> > > /listinfo/snapcraft
> > > 
> > 
> > -- 
> > XiaoGuo, Liu 
> > -- 
> > Snapcraft mailing list
> > Snapcraft at lists.snapcraft.io
> > Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman
> > /l
> > istinfo/snapcraft
> -- 
> Snapcraft mailing list
> Snapcraft at lists.snapcraft.io
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/l
> istinfo/snapcraft
-- 
Chris
KeyID 0xE372A7DA98E6705C
31.11972; -97.90167 (Elev. 1092 ft)
11:59:03 up 3 days, 16:27, 1 user, load average: 0.34, 0.18, 0.17
Ubuntu 16.04.1 LTS, kernel 4.4.0-47-generic #68-Ubuntu SMP Wed Oct 26 19:39:52 UTC 2016
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/snapcraft/attachments/20161113/b10ade70/attachment.sig>


More information about the Snapcraft mailing list