Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Snap package of bitcoind lacks apparmor access to entropy files in proc #217

Closed
BrunswickBTC opened this issue Jan 19, 2024 · 3 comments
Closed

Comments

@BrunswickBTC
Copy link

Apparmor triggers syslog messages when bitcoind attempts to access certain files in /proc
In bitcoind source the following list of files appear to be accessed for entropy collection:
AddFile(hasher, "/proc/diskstats");
AddFile(hasher, "/proc/vmstat");
AddFile(hasher, "/proc/schedstat");
AddFile(hasher, "/proc/zoneinfo");
AddFile(hasher, "/proc/meminfo");
AddFile(hasher, "/proc/softirqs");
AddFile(hasher, "/proc/stat");
AddFile(hasher, "/proc/self/schedstat");
AddFile(hasher, "/proc/self/status");

Snap's apparmor settings for the bitcoin-core package should be updated to permit access to these files.

lsb_release -a

No LSB modules are available.
Distributor ID: Debian
Description: Debian GNU/Linux 12 (bookworm)
Release: 12
Codename: bookworm

snap version

snap 2.60.4
snapd 2.60.4
series 16
debian 12
kernel 6.1.0-17-amd64

snap info bitcoin-core

name: bitcoin-core
summary: Fully validating Bitcoin peer-to-peer network node, wallet and GUI
publisher: Bitcoin Core
store-url: https://snapcraft.io/bitcoin-core
contact: https://github.com/bitcoin-core/packaging/issues/new?title=snap:
license: unset
description: |
Bitcoin Core connects to the Bitcoin peer-to-peer network to download and
fully validate blocks and transactions. It also includes a wallet and
graphical user interface.
commands:

  • bitcoin-core.cli
  • bitcoin-core.daemon
  • bitcoin-core.qt
  • bitcoin-core.tx
  • bitcoin-core.util
  • bitcoin-core.wallet
    snap-id: lGr3hNoqLtHTp2yV1BgnqyElQtLUDPeA
    tracking: latest/stable
    refresh-date: 43 days ago, at 10:03 CST
    channels:
    latest/stable: 26.0 2023-12-07 (152) 121MB -
    latest/candidate: ^
    latest/beta: ^
    latest/edge: 26.0 2023-12-07 (152) 121MB -
    26.x/stable: 26.0 2023-12-07 (152) 121MB -
    26.x/candidate: ^
    26.x/beta: ^
    26.x/edge: 26.0 2023-12-07 (152) 121MB -
    25.x/stable: 25.1 2023-10-19 (145) 120MB -
    25.x/candidate: ^
    25.x/beta: ^
    25.x/edge: 25.1 2023-10-19 (145) 120MB -
    24.x/stable: 24.2 2023-12-06 (149) 121MB -
    24.x/candidate: ^
    24.x/beta: ^
    24.x/edge: 24.2 2023-12-06 (149) 121MB -
    23.x/stable: 23.2 2023-06-05 (140) 119MB -
    23.x/candidate: ^
    23.x/beta: ^
    23.x/edge: 23.2 2023-06-05 (140) 119MB -
    22.x/stable: 22.1 2022-12-15 (129) 113MB -
    22.x/candidate: ^
    22.x/beta: ^
    22.x/edge: ^
    installed: 26.0 (152) 121MB -
@fanquake
Copy link
Member

Is this a duplicate of #115?

@BrunswickBTC
Copy link
Author

Yes

@fanquake
Copy link
Member

Ok, closing as a dupe of #115.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants