$ snappy-debug.security scanlog
INFO: following '/var/log/syslog'. If have dropped messages, use:
INFO: $ sudo journalctl --output=short --follow --all | sudo snappy-debug.security scanlog
sysctl: permission denied on key 'kernel.printk_ratelimit'
= AppArmor =
Time: Dec 7 17:28:42
Log: apparmor="DENIED" operation="open" profile="snap.quake-shareware.quake-shareware" name="/etc/wgetrc" pid=24363 comm="wget" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /etc/wgetrc (read)
Suggestion:
* adjust program to read necessary files from $SNAP, $SNAP_DATA, $SNAP_COMMON, $SNAP_USER_DATA or $SNAP_USER_COMMON
= AppArmor =
Time: Dec 7 17:29:06
Log: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/freedesktop/ScreenSaver" interface="org.freedesktop.ScreenSaver" member="Inhibit" mask="send" name="org.freedesktop.ScreenSaver" pid=24367 label="snap.quake-shareware.quake-shareware" peer_pid=3722 peer_label="unconfined"
DBus access
Suggestion:
* try adding 'screen-inhibit-control' to 'plugs'
= AppArmor =
Time: Dec 7 17:29:06
Log: apparmor="DENIED" operation="dbus_method_call" bus="session" path="/org/gnome/ScreenSaver" interface="org.gnome.ScreenSaver" member="SimulateUserActivity" mask="send" name="org.gnome.ScreenSaver" pid=24367 label="snap.quake-shareware.quake-shareware" peer_pid=3919 peer_label="unconfined"
DBus access
Suggestion:
* try adding 'screen-inhibit-control' to 'plugs'
= AppArmor =
Time: Dec 7 17:29:07
Log: apparmor="DENIED" operation="open" profile="snap.quake-shareware.quake-shareware" name="/sys/devices/pci0000:00/0000:00:02.0/0000:01:00.1/sound/card1/input12/capabilities/ev" pid=24367 comm="quakespasm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /sys/devices/pci0000:00/0000:00:02.0/0000:01:00.1/sound/card1/input12/capabilities/ev (read)
Suggestions:
* adjust program to not access '/sys/devices/pci0000:00/0000:00:02.0/0000:01:00.1/sound/card1/input12/capabilities/ev'
* adjust program to not access '/sys/devices/pci[0-9]*:[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/sound/card[0-9]*/input[0-9]*/capabilities/ev'
= AppArmor =
Time: Dec 7 17:29:07
Log: apparmor="DENIED" operation="open" profile="snap.quake-shareware.quake-shareware" name="/sys/devices/pci0000:00/0000:00:02.0/0000:01:00.1/sound/card1/input13/capabilities/ev" pid=24367 comm="quakespasm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /sys/devices/pci0000:00/0000:00:02.0/0000:01:00.1/sound/card1/input13/capabilities/ev (read)
Suggestions:
* adjust program to not access '/sys/devices/pci0000:00/0000:00:02.0/0000:01:00.1/sound/card1/input13/capabilities/ev'
* adjust program to not access '/sys/devices/pci[0-9]*:[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/sound/card[0-9]*/input[0-9]*/capabilities/ev'
= AppArmor =
Time: Dec 7 17:29:07
Log: apparmor="DENIED" operation="open" profile="snap.quake-shareware.quake-shareware" name="/sys/devices/pci0000:00/0000:00:02.0/0000:01:00.1/sound/card1/input14/capabilities/ev" pid=24367 comm="quakespasm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /sys/devices/pci0000:00/0000:00:02.0/0000:01:00.1/sound/card1/input14/capabilities/ev (read)
Suggestions:
* adjust program to not access '/sys/devices/pci0000:00/0000:00:02.0/0000:01:00.1/sound/card1/input14/capabilities/ev'
* adjust program to not access '/sys/devices/pci[0-9]*:[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/sound/card[0-9]*/input[0-9]*/capabilities/ev'
= AppArmor =
Time: Dec 7 17:29:07
Log: apparmor="DENIED" operation="open" profile="snap.quake-shareware.quake-shareware" name="/sys/devices/pci0000:00/0000:00:02.0/0000:01:00.1/sound/card1/input15/capabilities/ev" pid=24367 comm="quakespasm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /sys/devices/pci0000:00/0000:00:02.0/0000:01:00.1/sound/card1/input15/capabilities/ev (read)
Suggestions:
* adjust program to not access '/sys/devices/pci0000:00/0000:00:02.0/0000:01:00.1/sound/card1/input15/capabilities/ev'
* adjust program to not access '/sys/devices/pci[0-9]*:[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/sound/card[0-9]*/input[0-9]*/capabilities/ev'
= AppArmor =
Time: Dec 7 17:29:07
Log: apparmor="DENIED" operation="open" profile="snap.quake-shareware.quake-shareware" name="/sys/devices/pci0000:00/0000:00:14.2/sound/card0/input10/capabilities/ev" pid=24367 comm="quakespasm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /sys/devices/pci0000:00/0000:00:14.2/sound/card0/input10/capabilities/ev (read)
Suggestions:
* adjust program to not access '/sys/devices/pci0000:00/0000:00:14.2/sound/card0/input10/capabilities/ev'
* adjust program to not access '/sys/devices/pci[0-9]*:[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/sound/card[0-9]*/input[0-9]*/capabilities/ev'
= AppArmor =
Time: Dec 7 17:29:07
Log: apparmor="DENIED" operation="open" profile="snap.quake-shareware.quake-shareware" name="/sys/devices/pci0000:00/0000:00:14.2/sound/card0/input11/capabilities/ev" pid=24367 comm="quakespasm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /sys/devices/pci0000:00/0000:00:14.2/sound/card0/input11/capabilities/ev (read)
Suggestions:
* adjust program to not access '/sys/devices/pci0000:00/0000:00:14.2/sound/card0/input11/capabilities/ev'
* adjust program to not access '/sys/devices/pci[0-9]*:[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/sound/card[0-9]*/input[0-9]*/capabilities/ev'
= AppArmor =
Time: Dec 7 17:29:07
Log: apparmor="DENIED" operation="open" profile="snap.quake-shareware.quake-shareware" name="/sys/devices/pci0000:00/0000:00:14.2/sound/card0/input7/capabilities/ev" pid=24367 comm="quakespasm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /sys/devices/pci0000:00/0000:00:14.2/sound/card0/input7/capabilities/ev (read)
Suggestions:
* adjust program to not access '/sys/devices/pci0000:00/0000:00:14.2/sound/card0/input7/capabilities/ev'
* adjust program to not access '/sys/devices/pci[0-9]*:[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/sound/card[0-9]*/input[0-9]*/capabilities/ev'
= AppArmor =
Time: Dec 7 17:29:07
Log: apparmor="DENIED" operation="open" profile="snap.quake-shareware.quake-shareware" name="/sys/devices/pci0000:00/0000:00:14.2/sound/card0/input8/capabilities/ev" pid=24367 comm="quakespasm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /sys/devices/pci0000:00/0000:00:14.2/sound/card0/input8/capabilities/ev (read)
Suggestions:
* adjust program to not access '/sys/devices/pci0000:00/0000:00:14.2/sound/card0/input8/capabilities/ev'
* adjust program to not access '/sys/devices/pci[0-9]*:[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/sound/card[0-9]*/input[0-9]*/capabilities/ev'
= AppArmor =
Time: Dec 7 17:29:07
Log: apparmor="DENIED" operation="open" profile="snap.quake-shareware.quake-shareware" name="/sys/devices/pci0000:00/0000:00:14.2/sound/card0/input9/capabilities/ev" pid=24367 comm="quakespasm" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
File: /sys/devices/pci0000:00/0000:00:14.2/sound/card0/input9/capabilities/ev (read)
Suggestions:
* adjust program to not access '/sys/devices/pci0000:00/0000:00:14.2/sound/card0/input9/capabilities/ev'
* adjust program to not access '/sys/devices/pci[0-9]*:[0-9]*/[0-9]*:[0-9]*:[0-9]*.[0-9]*/sound/card[0-9]*/input[0-9]*/capabilities/ev'