Cliqz Snap

[Didier Roche]

Le 14/11/2016 à 15:13, Chris a écrit :
> On Mon, 2016-11-14 at 09:11 +0100, Didier Roche wrote:
>> Le 13/11/2016 à 19:04, Chris a écrit :
>>> On Sun, 2016-11-13 at 09:17 -0600, Chris wrote:
>>>> On Sun, 2016-11-13 at 10:41 +0800, XiaoGuo Liu wrote:
>>>>> Hi Chris,
>>>>>
>>>>> You may find the tips at https://github.com/snapcore/snapd/wiki
>>>>> /Sec
>>>>> ur
>>>>> ity. You may use the command like:
>>>>>
>>>>> $ scmp_sys_resolver 983045
>>>>> set_tls
>>>>> to find out the security violation.
>>>>>
>>>>> Best regards,
>>>>> XiaoGuo
>>>>>
>>>> Thank you XiaoGuo, so in my case I have syscall=272. Running 
>>>>
>>>> chris at localhost:~$ scmp_sys_resolver 272
>>>> unshare
>>>>
>>>> I've installed snappy-debug but can't seem to get any kind of
>>>> output
>>>> when run. Maybe I'm using the wrong commands?
>>>>
>>> Replying to my own post. I wasn't running the snap whenever I ran
>>>
>>> sudo snappy-debug.security scanlog --all-entries cliqz
>>>
>>> Once I executed the snap from the menu with the above running I got
>>>
>>> chris at localhost:~$ sudo snappy-debug.security scanlog --all-entries
>>> cliqz
>>> kernel.printk_ratelimit = 0
>>> = Seccomp =
>>> Time: Nov 13 11:49:59
>>> Log: auid=1000 uid=1000 gid=1000 ses=3 pid=29796 comm="cliqz"
>>> exe="/snap/cliqz/6/opt/CLIQZ/CLIQZ" sig=31 arch=c000003e
>>> 272(unshare)
>>> compat=0 ip=0x7ffacd899c19 code=0x0
>>> Syscall: unshare
>>>
>>> So, now it seems as there is a seccomp violation stopping the snap
>>> from
>>> running, at least that's what it appears to me to be. Where would I
>>> go
>>> from here? Contact the snap author?
>> Indeed, the snap author didn't set the confinement rules on his app.
>> The
>> snap should then be in devmode (but not published in the stable
>> channel), to not create user frustration executing something which
>> fails.
>>
>> Do you mind contacting upstream so that they work on confinement?
>> Thanks!
>> Didier
>>
> Hello Didier, do you mean to contact the author?
Hey Chris, indeed,

>  I did go to the
> support page and asked about the snap package not working and I
> received the below in reply, not being able to read German I 'think' it
> just points me to a link for support and their blog.
>
> Hallo Cpollock,
>
> deine Anfrage hat den CLIQZ Support erreicht. Unser Ziel ist es, dir so
> schnell wie möglich zu antworten. Das wird nicht allzu lange dauern,
> versprochen.
>
> In der Zwischenzeit kannst du mal in unsere FAQs schauen: https://cliqz
> .com/support
>
> Und kennst du schon unseren Blog? Schau mal hier: https://cliqz.com/abo
> utus/blog
>
> Danke für deine Geduld. Wir melden uns bald wieder bei dir!
>
> Der CLIQZ Support
>
> The support link takes me to the same place where I had said the snap
> doesn't work, I didn't see anything in the blog link about the snap
> package.

Yeah, my little remaining knowledge of German classes leads to the same
conclusion than yours.
Any native speaker here to help us by any chance? :)

Cheers,
Didier