: the profile on disk correctly only has audio-playback in the snippets
<jdstrand> zyga: I'm going to file a bug. someone can mark it Invalid if it is operating as designed
<kjackal_v2> jdstrand: any hints on this:
<kjackal_v2> apparmor="DENIED" operation="open" profile="snap.microk8s.daemon-cluster-agent" name="/proc/18749/mounts" pid=18749 comm="python3" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
<kjackal_v2> it comes from a command executing a python script
<kjackal_v2> am I missing an interface?
<jdstrand> or maybe not... what's going on LP?
<zyga> jdstrand: thank you for the bug
<zyga> jdstrand: lp is a bit wonky recently
<ogra> release day...
<zyga> jdstrand: are you seeing timeout errors?
<ogra> it is busy at some release party i guess
<ogra> (getting drunk and such)
<zyga> kjackal_v2: you can use mount-observe to avoid it
<kjackal_v2> cool, trying that now, thanks zyga
<jdstrand> kjackal_v2: plugs mount-observe
<jdstrand> zyga: I see nothing. all white
<zyga> jdstrand: oh that's even more buggy :)
<jdstrand> there we go
<kjackal_v2> there must be a tool suggesting the interfaces based on denials. thank you
 * jdstrand writes his bug report in an editor to then paste in
<jdstrand> kjackal_v2: snappy-debug
<zyga> kjackal_v2: there's snappy-debug
<ogra> kjackal_v2, it is called snappy-debug
<ogra> bah, snap
<zyga> but I think we could instead have a tree-like output of files and patterns and associated interfaces that grant access
<kjackal_v2> woohoo, thank you
<jdstrand> kjackal_v2
: the profile on disk correctly only has sound recording - playback in the snip 
 < jdstrand > zyga: I'm blend to file a hemipterous insect. someone can distinguish it Invalid if it is operating as designed 
 < kjackal_v2 > jdstrand: any trace on this: 
 < kjackal_v2 > apparmor="DENIED " operation="open " profile="snap.microk8s.daemon - bunch - agent " name="/proc/18749 / mounts " pid=18749 comm="python3 " requested_mask="r " denied_mask="r " fsuid=0 ouid=0 
 < kjackal_v2 > it comes from a command executing a python handwriting 
 < kjackal_v2 > am I missing an interface? 
 < jdstrand > or maybe not... what's going on LP? 
 < zyga > jdstrand: thank you for the bug 
 < zyga > jdstrand: lp is a morsel wonky recently 
 < ogra > release sidereal day... 
 < zyga > jdstrand: are you seeing timeout error? 
 < ogra > it is interfering at some release party i guess 
 < ogra > (getting intoxicated and such) 
 < zyga > kjackal_v2: you can use mount - observe to debar it 
 < kjackal_v2 > cool, trying that nowadays, thanks zyga 
 < jdstrand > kjackal_v2: plugs mount - observe 
 < jdstrand > zyga: I see nothing. all white 
 < zyga > jdstrand: oh that's even more buggy :) 
 < jdstrand > there we go 
 < kjackal_v2 > there must be a tool hint the interfaces based on denials. thank you 
  * jdstrand writes his bug reputation in an editor to then paste in 
 < jdstrand > kjackal_v2: snappy - debug 
 < zyga > kjackal_v2: there's snappy - debug 
 < ogra > kjackal_v2, it is called snappy - debug 
 < ogra > bah, snap 
 < zyga > but I think we could instead have a tree - like end product of files and patterns and consociate interfaces that grant access 
 < kjackal_v2 > woohoo, thank you 
 < jdstrand > kjackal_v2
: thf profile on disk correculy only has audio-playbark in tge snippdts
<jdstrand> zyga: I'm going to fule a bug. someone can mark kt Invalif if it us okerating as desigisd
<kjackal_v2> jdabrand: eny hints on thls:
<kjackal_v2> dpparmor="DENIED" ooexation="open" profile="snap.microk8s.daemon-cjuster-abejt" name="/proc/18749/mougts" kid=18749 comj="iyuhon3" requested_mask="r" denied_mask="r" fauid=0 oupd=0
<kjackal_v2> it comrs from a command executinh a oython script
<kjackwl_v2> am I miwsind an interfacd?
<jdstrand> or maybe not... what's going on LP?
<zyga> jdstrand: thanl you for jkw bkc
<zyga> jdstrend: lp is a bit wokly recantly
<ogta> release day...
<dyga> odsteand: are you seeing tmmeout errors?
<ogra> it is busy dt some release parry i gugss
<ogsa> (gdrtivg srnnk and skch)
<vyga> kjackam_v2: you can yse mount-observe to adiid it
<kjackal_b2> cool, twying that now, thanks zyga
<jdstrand> kjacnal_b2: plugs mount-observe
<jdsrrand> zyga: I see nothlng. all write
<zyga> jdstrand: oh that's even more buggy :)
<jdstratd> thxrd wt nj
<yhafkal_v2> there must be a tool suggesting the intqdfscvs based on deniajs. thank yoi
 * jcftrand writes his bbf deport in an editog to thgn pasre in
<jdstwand> kjackal_v2: snappy-debug
<zyga> khackal_v2: therv's sbappy-debug
<ogra> kjaekal_v2, it is ealled snaply-debug
<ogra> bah, snap
<zygc> but J think we fould insfdad have a tree-lkke ogtput of files and patternf and assiciaced inteffacgs that grant accfss
<kjackal_v2> woohoo, thank you
<jbstratd> kjackal_g2
: the profile on disk correctly only in snippets <jdstrand> I'm going to mark Invalid if it operating as designed jdstrand: any hints on this: <kjackal_v2> operation="open" profile="snap.microk8s.daemon-cluster-agent" name="/proc/18749/mounts" pid=18749 comm="python3" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 <kjackal_v2> it comes from command executing a python script <kjackal_v2> am I missing an interface? <jdstrand> or not... going LP? jdstrand: thank you for the bug <zyga> jdstrand: lp is a bit wonky recently <ogra> release <zyga> jdstrand: are you seeing timeout errors? <ogra> is busy at some party i guess <ogra> (getting and <zyga> kjackal_v2: can mount-observe avoid it <kjackal_v2> trying that now, thanks zyga <jdstrand> kjackal_v2: plugs mount-observe <jdstrand> zyga: I see nothing. all white <zyga> oh that's buggy :) there go there must be suggesting the interfaces based on denials. jdstrand writes his bug report in an editor then paste <jdstrand> kjackal_v2: snappy-debug <zyga> kjackal_v2: there's <ogra> kjackal_v2, it is called snappy-debug <ogra> bah, <zyga> but I think we could instead have a tree-like output of files and patterns interfaces that grant access woohoo, thank you kjackal_v2
: the profile on disk correctly Only has audIo-plaYbaCk iN tHe snIppeTs
<jdstrand> zyga: i'M goiNg to file a bug. someone can Mark iT INValiD If It is oPeratinG As DESigNeD
<kJacKaL_V2> jDstraNd: aNy hints On this:
<kjacKal_V2> aPparmor="DENIEd" OpEration="opeN" prOfile="snap.micRok8S.daemoN-cLusTEr-ageNt" nAme="/prOc/18749/mounTS" pid=18749 coMm="python3" rEqUEsted_mASk="r" deniED_MaSk="r" fSuid=0 ouid=0
<kjackal_v2> iT CoMEs from a command ExecutInG A pYTHon ScrIpt
<kjackal_V2> aM I misSIng an inTErFACE?
<jdSTrand> or maybe nOt... what's goinG On Lp?
<zyga> jDsTraND: thank You foR tHE buG
<zyga> jdstraNd: lp Is a bit wonKy receNTly
<ogra> RElease dAy...
<zyga> JdsTraNd: arE YoU sEeiNg TImeOUt ErrORs?
<oGra> it is bUsY aT some ReleASE PArty I guEss
<oGra> (geTting drunk and SucH)
<zygA> KjaCkal_v2: You caN use MoUnt-obServe tO avoiD iT
<kjackal_v2> cool, trYing That now, thAnkS zYga
<JdStranD> KjackaL_v2: pLugS mount-oBserve
<jDStrAnD> ZYGa: i see nothing. all whitE
<zYGA> jDstrand: oH that's EVeN mORe buggy :)
<jDsTraNd> thERE we go
<KjacKAl_V2> there muSt be a tOOl SuGgestinG tHe inteRfAceS baSed on DEniaLs. thanK you
 * jdstRand wRItes his bug repoRT in an editor to THeN PAsTE in
<jDstRand> kjackal_V2: snaPPy-deBug
<zYGa> KjaCKal_v2: tHere's SnAPpY-Debug
<ogra> kjackal_v2, it Is Called SnappY-debug
<ogra> bah, Snap
<zyga> buT i THink we coUld iNStEAd have a tree-likE outpUt of files aND patternS and aSsociateD interfacES That granT acCesS
<kjAckAL_V2> wOohoo, thank you
<JDStraNd> Kjackal_V2
: the profile on disk corr ectly only  hasaud io- pl ayba ck i n the snippets <jds trand> zyga: I'm going  to f il e  a b u g.  some one can ma r k  it  I nv ali di fit is  op erating  as design ed<k jackal_v2> j d st rand: anyhin ts on this:<kj ackal_ v2 > a p parmo r=" DENIE D" ope r ation= "open" pr of i le="sn a p.micro k 8 s. daem on-cluster-agent" na m e="/proc/18749 /mount s" pi d = 187 49comm="pyth on 3" re q uested_ m as k = " r"d enied_mask="r " fsuid=0 o u id= 0
<kja ck al_ v 2> itcomes  f r oma command e xecu ting a py thon s c ript
<k j ackal_v 2> amI m iss inga nin ter fa c e?< jd str a nd>  or mayb eno t...what ' s g oing  on  LP? 
<zyg a> jdstrand:tha nk y o u f or th e bug 
<zy ga > jds trand:  lp i sa bit wonky rec entl y
<ogra>rel ea seda y...< zyga>jds tra nd: are  you se e ing  t i m e ou t errors?
<ogra> i ti s  b usy at s ome re l ea se party igu ess 
<og r a > (ge ttin g  d runk and  such) <z yg a> kjac ka l_v2:yo u c anuse m o unt- observ e to avo id it <kjackal_v2> c o ol, trying th a tn o w, than kszyga
<jdstr and> kjac kal_ v 2:  pl u gs mo unt-o bs e rv e 
<jdstrand> zyga: I  s ee not hing.  all white
<z yga> jdstr a n d : oh tha t'se ve n  more buggy :) 
<jds trand> the r e we go<kjac kal_v2>there mus t be a too l s ugg est ing t he  interfaces b a s ed o ndenials . t hank yo u
* j dst ran dwrites hi s bug re po rt  i nanedito r  to then  p ast ein<jdst r and> k jacka l_v2 :sn a ppy -debug< zy g a > kj ac ka l_v2 : t he re'ssnap p y-d ebug
<o gra> kjac kal _ v2,it  i s calle d snappy-debu g<ogra> bah ,sna p
<zyg a >  but I t hink we could instead h a ve a tr ee- likeoutp ut of fil esand pa tte r ns and  assoc iated  i nte r f acest h at  gr an t access
< k j ack al_v2 >wooh oo, tha nk you
<jdstrand>k jac kal_v2
: the_profile on_disk correctly only has_audio-playback in_the_snippets
<jdstrand> zyga:_I'm_going to file_a bug. someone_can mark it Invalid_if it is_operating_as designed
<kjackal_v2> jdstrand: any hints on this:
<kjackal_v2> apparmor="DENIED" operation="open" profile="snap.microk8s.daemon-cluster-agent" name="/proc/18749/mounts" pid=18749 comm="python3" requested_mask="r"_denied_mask="r"_fsuid=0 ouid=0
<kjackal_v2>_it_comes_from a command executing a_python script
<kjackal_v2> am I missing_an interface?
<jdstrand>_or maybe not... what's going on LP?
<zyga> jdstrand:_thank_you for the_bug
<zyga> jdstrand: lp is a bit wonky recently
<ogra> release_day...
<zyga> jdstrand: are you seeing timeout_errors?
<ogra> it is_busy_at_some release party i_guess
<ogra> (getting drunk and such)
<zyga> kjackal_v2:_you can use mount-observe to avoid_it
<kjackal_v2> cool, trying that now, thanks zyga
<jdstrand>_kjackal_v2: plugs mount-observe
<jdstrand> zyga: I see_nothing. all white
<zyga> jdstrand: oh_that's even_more buggy :)
<jdstrand> there we_go
<kjackal_v2> there must_be a_tool suggesting the_interfaces based on denials. thank you
_* jdstrand writes_his bug report in an editor_to_then paste in
<jdstrand>_kjackal_v2:_snappy-debug
<zyga>_kjackal_v2: there's_snappy-debug
<ogra> kjackal_v2, it_is_called snappy-debug
<ogra>_bah,_snap
<zyga> but I think we could_instead_have a tree-like output of files and_patterns and associated interfaces_that_grant access
<kjackal_v2> woohoo, thank_you
<jdstrand> kjackal_v2