[solved] How do I get snap-confine working?

[PsychoHermit]

Greetings folks,

How do I set up snap-confine? I have copied /etc/apparmor.d/usr.lib.snapd.snap-confine.real to /etc/apparmor.d/usr.lib.snapd.snap-confine trying to get snap-confine working. No joy, when I try to run anything that is snap based I get

snap-confine has elevated permissions and is not confined but should be. Refusing to continue to avoid permission escalation attacks

Thanks in advance for any assistance you can offer.
--glenn

 

[KGIII]

I'm not an expert on Snaps, but you shouldn't have to mess with that at all. It's used internally by the snapd process. It's the process that deals with Snap isolation (confinement) similar to the jails (eg Firejail).

What did you do before you got this error, or is Snap doing this of its own volition?

 

[PsychoHermit]

I didn;t do anything to provoke this, snap is doing it of it's own violation.

I found the answer though.

systemctl enable --now snapd.apparmor.service

Thanks,
--glenn

 

[PsychoHermit]

Solved,

systemctl enable --now apparmor.service
systemctl enable --now snapd.apparmor.service

--glenn