Skip to content

snap-policy: Manage ENOPROTOOPT error in aa_getpeercon()

The call aa_getpeercon(), in the snap permission management code, requires a patched kernel with support for 'fine grained unix mediation'. Without it, the call returns an ENOPROTOOPT error.

Without aa_getpeercon() we can't know whether a connection comes from a snap or an unconfined program, so we have no choice but give full access, because not doing so would prevent any pulse client to work properly.

Edited by Sergio Costas

Merge request reports