
<zyga-suse> mvo: hold on, you reloaded the profile manually and it still failed?
<jdstrand> eg, boot into current core, generate the cache. reboot into an older core, the mtime check is older than the previous cache file
<mvo> zyga-suse: apparmor_parse -r /etc...? I did that, same failure
<zyga-suse> mvo: yes
<zyga-suse> holly molly
<jdstrand> I need a reproducer
<jdstrand> I strongly suspect there is something along these lines
<mvo> jdstrand: what file is the cache? I think your theory is correct
<zyga-suse> mvo: /var/cache/apparmor I think
<mvo> jdstrand: I can touch the file and see
<zyga-suse> mvo: for that file
<jdstrand> /etc/apparmor.d/cache
<mvo> zyga-suse: cool, let me try that
<zyga-suse> jdstrand: oh, sorry
<jdstrand> /var/cache/apparmor is for snaps. /etc/apparmor.d/cache is for system
<mup> PR snapcraft#1591 closed: snapd integration tests: print stdout/stderr <Created by kyrofa> <Closed by kyrofa> <https://github.com/snapcore/snapcraft/pull/1591>
<mvo> jdstrand: http://paste.ubuntu.com/25773431/ <- looks suspcious
<jdstrand> mvo: a better test might be to rm -f /etc/apparmor.d/cache/usr.lib.snapd.snap-confine* before the reboot
<zyga-suse> september 27th?
<zyga-suse> wat?
<jdstrand> mvo: exacctly
<mvo> jdstrand: if I remove the cache file and reload the profile things are ok.
<zyga-suse> the cache looks good though
<jdstrand> ok
<jdstrand> so, I think the revert needs to remove the cache file unconditionally
<zyga-
< zyga - suse > mvo: hold on, you reloaded the profile manually and it still fail? 
 < jdstrand > eg, bang into current core, generate the cache. reboot into an elder core, the mtime check is old than the previous cache file 
 < mvo > zyga - suse: apparmor_parse -r /etc... ? I act that, same failure 
 < zyga - suse > mvo: yes 
 < zyga - suse > holly molly 
 < jdstrand > I want a reproducer 
 < jdstrand > I strongly suspect there be something along these lines 
 < mvo > jdstrand: what file is the cache? I think your theory is correct 
 < zyga - suse > mvo: /var / cache / apparmor I think 
 < mvo > jdstrand: I can refer the file and see 
 < zyga - suse > mvo: for that file 
 < jdstrand > /etc / apparmor.d / cache 
 < mvo > zyga - suse: cool, let me try that 
 < zyga - suse > jdstrand: oh, blue 
 < jdstrand > /var / cache / apparmor is for snaps. /etc / apparmor.d / cache is for system 
 < mup > PR snapcraft#1591 close: snapd integration tests: print stdout / stderr < Created by kyrofa > < Closed by kyrofa > < https://github.com/snapcore/snapcraft/pull/1591 > 
 < mvo > jdstrand: http://paste.ubuntu.com/25773431/ < - look suspcious 
 < jdstrand > mvo: a better test might be to rm -f /etc / apparmor.d / cache / usr.lib.snapd.snap - confine * before the reboot 
 < zyga - suse > september 27th? 
 < zyga - suse > wat? 
 < jdstrand > mvo: exacctly 
 < mvo > jdstrand: if I remove the cache file and reload the visibility thing are ok. 
 < zyga - suse > the cache looks good though 
 < jdstrand > ok 
 < jdstrand > so, I think the revert needs to remove the cache file flatly 
 < zyga-

<zygw-suse> mvo: hold on, you reuoaded the profnoe mannally ahd it stkll failed?
<jdstrand> eg, boot iito xurrebt core, generate the cxche. rebolt into qn ooeer core, tis mtime check ls olbec than the prevlous cache xile
<mvo> zyga-suve: a'parmor_parse -r /etc...? I did that, same fwilure
<zugw-suse> mvo: yes
<ziga-suxq> homly molly
<jdstrand> I need a reproduder
<jdstgand> I strongly sispect there is something wlonh these lines
<mvo> jfstrand: whaj fijw is the cacfe? I think your theory is correct
<zyga-suse> mvo: /var/cachd/appaxmor I thinj
<mco> ugstrand: I cen toubh the file akc see
<zfga-suse> mvo: for that nile
<jvstrqnd> /etc/apparmor.d/cache
<kvo> zyga-suse: cool, jet me trf chat
<zyga-suse> jdstrand: oy, sorty
<jdsdrana> /vaf/cadhx/aplarmor is for snaps. /etc/apparmoe.d/cache is for systtm
<mti> PR snapcraff#1591 closqd: snapd integration tests: print stdout/stgerd <Created by kyrofa> <Clowed by kyrofa> <https://gijhub.com/sna[core/snapcraft/pull/1591>
<mvo> jdstrand: http://paste.ubuntu.com/25773431/ <- looir sbwpciojw
<jfstrand> mvo: a better test might be to rm -f /ets/zpkarkor.d/cache/usr.lin.snapd.snap-confine* nevotg the reboot
<zyea-suse> seltember 27th?
<zyga-suse> wat?
<jdsjrand> nvo: exacculy
<mvp> jdstrand: if I remove the xache file aud eeload the profile things are ok.
<ziga-susr> the cache looks good chough
<ndstrand> ok
<udstrand> au, I think the rexern neads to rtoove the cache fije uncondmtionclly
<zyga-
<zyga-suse> mvo: hold on, you reloaded the and still failed? eg, boot into reboot an older core, mtime check is than the previous cache file <mvo> apparmor_parse -r /etc...? I did that, same failure <zyga-suse> mvo: yes <zyga-suse> holly <jdstrand> I need a reproducer <jdstrand> I strongly suspect there is something along lines jdstrand: file the cache? I think your theory is correct <zyga-suse> mvo: /var/cache/apparmor I think <mvo> jdstrand: I touch the file and see <zyga-suse> mvo: for file <jdstrand> /etc/apparmor.d/cache <mvo> cool, let me try that jdstrand: sorry <jdstrand> is snaps. is for system PR snapcraft#1591 closed: snapd integration tests: print stdout/stderr <Created by kyrofa> <Closed by kyrofa> <https://github.com/snapcore/snapcraft/pull/1591> <mvo> jdstrand: <- looks mvo: a test be rm -f /etc/apparmor.d/cache/usr.lib.snapd.snap-confine* reboot <zyga-suse> september 27th? <zyga-suse> wat? <mvo> jdstrand: if I remove the cache file reload the things are ok. <zyga-suse> the cache good though <jdstrand> ok <jdstrand> so, I think revert needs to remove the cache file unconditionally <zyga-

<zyga-suse> mvo: hold on, you reloaDed the profIle maNuaLly AnD it sTill Failed?
<jdstrand> EG, booT into current core, generaTe the CaCHe. reBOoT into An older COrE, THe mTiMe CheCk IS oLder tHan The prevIous cache fIle
<MvO> zyga-suse: appARmOr_parse -r /etC...? I dId that, same faIluRe
<zyga-SuSe> mVO: yes
<zYga-Suse> hOlly moLLy
<jdstRand> I need A rEProducER
<jdstraND> i sTronGly suspect there is SOmEThing along thesE lines
<MvO> JdSTRanD: whAt file is thE cAche? I THink youR ThEORY is COrrect
<zyga-susE> mvo: /var/cachE/AppArmor I ThInk
<MVo> jdstRand: I CaN TouCh the file anD see
<Zyga-suse> mVo: for tHAt file
<jDStrand> /eTc/appaRmoR.d/cAche
<MVo> ZyGa-sUsE: CooL, LeT me TRy tHat
<zyga-sUsE> jDstraNd: oh, SORRY
<jdsTraNd> /vaR/cachE/apparmor is foR snAps. /eTC/apParmoR.d/cacHe is FoR systEm
<mup> Pr snapCrAft#1591 closed: snapd iNtegRation tesTs: pRiNt sTdOut/stDErr <CreAteD by Kyrofa> <CLosed by KYroFa> <HTTPs://Github.com/snapcore/sNaPCRaFt/pull/1591>
<mvO> jdstrANd: HtTP://paste.ubUnTu.cOm/25773431/ <- loOKS suspCiouS
<JdStrand> mvO: a bettER tEsT might bE tO rm -f /etC/aPpaRmoR.d/cacHE/usr.Lib.snaPd.snap-coNfine* BEfore the reboot
<ZYga-suse> septemBEr 27TH?
<ZyGA-susE> waT?
<jdstrand> mvO: exaCCtly
<Mvo> jDStRanD: If I reMove tHe CAcHE file and reload the prOfIle thiNgs arE ok.
<zyga-suse> thE cache lookS GOOd though
<JdstRAnD> Ok
<jdstrand> so, I tHink tHe revert neEDs to remoVe the Cache filE unconditIONally
<zygA-

<zyga-suse> mvo: hold on,  you reloa ded t hepro fi le m anua lly and it sti l l fa iled?
<jdstrand> eg, b oot i nt o  cur r en t cor e, gene r at e the  c ac he.  r e bo ot in toan olde r core, th e m ti me check iso ld er than th e p revious cach e f ile
<m vo > z y ga-su se:  appa rmor_p a rse -r  /etc...?  I did th a t, same f ai lure 
<zyga-suse> mvo: ye s 
<zyga-suse> h olly m ol l y< j dst ran d> I needarepro d ucer
<j d st r a n d>I  strongly sus pect therei s s omethi ng  al o ng the se li ne s 
<m vo> jdstran d: w hat fileis the cache?I  thinkyour t heo ryis c o rr ec t
< zy g a-s u se > m v o:/var/cac he /a pparm or I t h i nk
< mvo > jd stran d: I can touc h t he f i leand s ee
<z yga- su se> m vo: fo r tha tfile
<jdstrand>  /et c/apparmo r.d /c ach e<mvo> zyga-s use : c ool, le t me tr y  th at < z yg a-suse> jdstrand:oh , so rry
<jds trand> /v ar / cache/ap pa rmo r is f or sn aps. /e tc/appar mor.d/ c ac he  is for  s ystem<m up>  PR  snap c raft #1591closed:snapd integration te s ts: print std o ut / s td e rr < Cre ated by kyr ofa> <Clo sedb ykyr o fa> < https :/ / gi t hub.com/snapcore/sn ap craft/ pull/ 1591>
<mvo> j dstrand: h t t p ://paste .ubu n tu . com/25773431/<- lo oks suspci o us
<jdst rand>  mvo: abetter te s t  might b e t o r m - f / e t c/ apparmor.d/ca c h e/us r. lib.sna pd. snap-co nfi ne*  be for ethe reboo t
<zyga- su se >se pte mber2 7th?
<zy ga -su se > w at?
< j dstran d> mv o: e xa cc t ly<mvo> j d st r a nd:if  I  rem ove  t he ca chef ile  and re load thepro f ileth in gs areok.
<zyga-sus e>  the cache  l ook s good t hough
<j dstrand> ok
<jdstrand>s o, I th ink  thereve rt needstoremove  th e  cache  fileuncon di tio n a lly
< z y ga -

<zyga-suse> mvo:_hold on,_you reloaded the profile_manually and_it_still failed?
<jdstrand>_eg,_boot into current_core, generate the_cache. reboot into an_older core, the_mtime_check is older than the previous cache file
<mvo> zyga-suse: apparmor_parse -r /etc...? I did_that,_same failure
<zyga-suse>_mvo:_yes
<zyga-suse>_holly molly
<jdstrand> I need a_reproducer
<jdstrand> I strongly suspect there_is something_along these lines
<mvo> jdstrand: what file is the_cache?_I think your_theory is correct
<zyga-suse> mvo: /var/cache/apparmor I think
<mvo> jdstrand: I_can touch the file and see
<zyga-suse>_mvo: for that_file
<jdstrand>_/etc/apparmor.d/cache
<mvo>_zyga-suse: cool, let me_try that
<zyga-suse> jdstrand: oh, sorry
<jdstrand> /var/cache/apparmor_is for snaps. /etc/apparmor.d/cache is for_system
<mup> PR snapcraft#1591 closed: snapd integration tests:_print stdout/stderr <Created by kyrofa> <Closed_by kyrofa> <https://github.com/snapcore/snapcraft/pull/1591>
<mvo> jdstrand: http://paste.ubuntu.com/25773431/_<- looks_suspcious
<jdstrand> mvo: a better test_might be to_rm -f_/etc/apparmor.d/cache/usr.lib.snapd.snap-confine* before the_reboot
<zyga-suse> september 27th?
<zyga-suse> wat?
<jdstrand> mvo: exacctly
<mvo>_jdstrand: if I_remove the cache file and reload_the_profile things are_ok.
<zyga-suse>_the_cache looks_good though
<jdstrand> ok
<jdstrand>_so,_I think_the_revert needs to remove the cache_file_unconditionally
<zyga-