tolowski: thank you!
<jdstrand> mvo: you pasted 'cat /etc/apparmor.d/usr.lib.snapd.snap-confine.real'
<mvo> jdstrand, zyga-suse http://paste.ubuntu.com/25773336/
<zyga-suse> mvo: (I mean are there both)
<zyga-suse> mvo: good
<mvo> zyga-suse, jdstrand so that is the only apparmor profile for snap-confine (this is on a core system)
<jdstrand> mvo: what kernel are you using?
<zyga-suse> yeah, my question exactly
<jdstrand> cat /proc/version_signature
<mvo> jdstrand: http://paste.ubuntu.com/25773342/
<zyga-suse> mvo: that product may have a different kernel snap
<zyga-suse> mvo: but I assume you have done this on generic
<zyga-suse> aha
<mvo> jdstrand: http://paste.ubuntu.com/25773346/
<mvo> yeah, this is a stock (spread) core VM
<zyga-suse> mvo: at this time I'd collect verbose apparmor debug data
<zyga-suse> mvo: can you look at /sys/kernel/apparmor
<mvo> zyga-suse: sure, what do I need to do ?
<zyga-suse> mvo: and collect (cat + redirect) the profile for snap-confine
<zyga-suse> just a moment
<zyga-suse> cd /sys/kernel/security/apparmor
<zyga-suse> cd policy/profiles
<jdstrand> mvo: what if you downgrade the kernel to stable
<zyga-suse> cd usr.lib.snapd.snap-confine.*
<zyga-suse> mvo: collect everything there
<zyga-suse> mvo: note that tar is silly and gets empty files
<zyga-suse> you need a dumb cp -R copy
<zyga-suse> then tarball
<zyga-suse> then please send/attach that
<zyga-suse> I'll have a look
<zyga-suse> if you could, save the snap_confine profile text as well
<zyga-suse> verbatim as it appears for you
<zyga-suse> I know you pastebinned it but if it's in the same tarball it's more convenient
<zyga-suse> mvo: after that you can experiment in any way, change the kernel as jdstrand suggeste
<zyga-suse> *suggested, perhaps
<mup> PR snapd#4057 closed: interfaces: remove duplicated MockPlug/MockSlot helpers from interface tests <Created by stolowski> <Closed by stolowski> <https://github.com/snapcore/snapd/pull/4057>
<mvo> zyga-suse: on the way via mail
<mvo> zyga-suse: jdstrand going to the stable kernel now an