{"action":"created","issue":{"url":"https://api.github.com/repos/snapcore/snap-confine/issues/156","repository_url":"https://api.github.com/repos/snapcore/snap-confine","labels_url":"https://api.github.com/repos/snapcore/snap-confine/issues/156/labels{/name}","comments_url":"https://api.github.com/repos/snapcore/snap-confine/issues/156/comments","events_url":"https://api.github.com/repos/snapcore/snap-confine/issues/156/events","html_url":"https://github.com/snapcore/snap-confine/pull/156","id":179398266,"number":156,"title":"Check the real alternatives directory in core_snap_dir","user":{"login":"binli","id":110512,"avatar_url":"https://avatars.githubusercontent.com/u/110512?v=3","gravatar_id":"","url":"https://api.github.com/users/binli","html_url":"https://github.com/binli","followers_url":"https://api.github.com/users/binli/followers","following_url":"https://api.github.com/users/binli/following{/other_user}","gists_url":"https://api.github.com/users/binli/gists{/gist_id}","starred_url":"https://api.github.com/users/binli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/binli/subscriptions","organizations_url":"https://api.github.com/users/binli/orgs","repos_url":"https://api.github.com/users/binli/repos","events_url":"https://api.github.com/users/binli/events{/privacy}","received_events_url":"https://api.github.com/users/binli/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2016-09-27T05:05:52Z","updated_at":"2016-09-30T20:26:20Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/snapcore/snap-confine/pulls/156","html_url":"https://github.com/snapcore/snap-confine/pull/156","diff_url":"https://github.com/snapcore/snap-confine/pull/156.diff","patch_url":"https://github.com/snapcore/snap-confine/pull/156.patch"},"body":"We found an issue when run the snapd in BQ tablet device, it will bind /snap/ubuntu-core/current/etc/alternatives, but before that we don't check the user's permissions with access."},"comment":{"url":"https://api.github.com/repos/snapcore/snap-confine/issues/comments/250844001","html_url":"https://github.com/snapcore/snap-confine/pull/156#issuecomment-250844001","issue_url":"https://api.github.com/repos/snapcore/snap-confine/issues/156","id":250844001,"user":{"login":"zyga","id":784262,"avatar_url":"https://avatars.githubusercontent.com/u/784262?v=3","gravatar_id":"","url":"https://api.github.com/users/zyga","html_url":"https://github.com/zyga","followers_url":"https://api.github.com/users/zyga/followers","following_url":"https://api.github.com/users/zyga/following{/other_user}","gists_url":"https://api.github.com/users/zyga/gists{/gist_id}","starred_url":"https://api.github.com/users/zyga/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zyga/subscriptions","organizations_url":"https://api.github.com/users/zyga/orgs","repos_url":"https://api.github.com/users/zyga/repos","events_url":"https://api.github.com/users/zyga/events{/privacy}","received_events_url":"https://api.github.com/users/zyga/received_events","type":"User","site_admin":false},"created_at":"2016-09-30T20:26:20Z","updated_at":"2016-09-30T20:26:20Z","body":"Hmm, but if snap-confine runs as root (it has to) then the permission check makes no sense. I must be missing something. Let me tell you this, this code is going away this week (a major change is going to land soon) so Iet's wait until next week to see how it would look like (similar but different code will exist). It would also help if you could ping me next week to explain how to reproduce this (I have a BQ 4.5E if that helps)"}}
{"actor":{"display_login":"zyga"}}