n$ snappy-debug.security scanlog
sysctl: permission denied on key 'kernel.printk_ratelimit'
= AppArmor =
Time: Oct  4 20:44:43
Log: apparmor="DENIED" operation="capable" profile="snap.connman.connman" pid=8375 comm="ConnMan" capability=1  capname="dac_override"
Capability: dac_override
Suggestions:
* adjust program to not require 'CAP_DAC_OVERRIDE' (see 'man 7 capabilities')
* add one of 'log-observe' to 'plugs'
* do nothing if program otherwise works properly

= AppArmor =
Time: Oct  4 20:44:43
Log: apparmor="DENIED" operation="capable" profile="snap.connman.connman" pid=8375 comm="ConnMan" capability=2  capname="dac_read_search"
Capability: dac_read_search
Suggestions:
* adjust program to not require 'CAP_DAC_READ_SEARCH' (see 'man 7 capabilities')
* do nothing if program otherwise works properly

= AppArmor =
Time: Oct  4 20:44:44
Log: apparmor="DENIED" operation="open" profile="snap.connman.connman" name="/home/shuduo/work/connman/ListOfServers.txt" pid=8375 comm="ConnMan" requested_mask="rac" denied_mask="rac" fsuid=0 ouid=0
File: /home/shuduo/work/connman/ListOfServers.txt (write)
Suggestion:
* adjust program to write to $SNAP_DATA, $SNAP_COMMON, $SNAP_USER_DATA or $SNAP_USER_COMMON

= AppArmor =
Time: Oct  4 20:44:44
Log: apparmor="DENIED" operation="open" profile="snap.connman.connman" name="/home/shuduo/work/connman/ListOfServers.txt" pid=8375 comm="ConnMan" requested_mask="r" denied_mask="r" fsuid=0 ouid=0
File: /home/shuduo/work/connman/ListOfServers.txt (read)
Suggestion:
* adjust program to read necessary files from $SNAP, $SNAP_DATA, $SNAP_COMMON, $SNAP_USER_DATA or $SNAP_USER_COMMON

= AppArmor =
Time: Oct  4 20:44:44
Log: apparmor="DENIED" operation="exec" profile="snap.connman.connman" name="/sbin/ifconfig" pid=8381 comm="sh" requested_mask="x" denied_mask="x" fsuid=0 ouid=0
File: /sbin/ifconfig (exec)
Suggestions:
* adjust snap to ship 'ifconfig'
* adjust program to use relative paths if the snap already ships 'ifconfig'