apparmor tests, usysconf, and snaps are failing when rebuilding apparmor against python 3.7
make check -C parser tests are failing with (all tests fail with the same error)
======================================================================
FAIL: test_profile_newer_rewrites_cache (__main__.AAParserAltCacheTests)
----------------------------------------------------------------------
Traceback (most recent call last):
File "/home/build/YPKG/root/apparmor/build/apparmor-2.13.3/parser/tst/testlib.py", line 50, in new_unittest_func
return unittest_func(self)
File "./caching.py", line 448, in test_profile_newer_rewrites_cache
self._generate_cache_file()
File "./caching.py", line 257, in _generate_cache_file
self.run_cmd_check(cmd)
File "/home/build/YPKG/root/apparmor/build/apparmor-2.13.3/parser/tst/testlib.py", line 73, in run_cmd_check
self.assertEqual(rc, expected_rc, "Got return code %d, expected %d\nCommand run: %s\nOutput: %s" % (rc, expected_rc, (' '.join(command)), report))
AssertionError: 1 != 0 : Got return code 1, expected 0
Command run: ../apparmor_parser --config-file=./parser.conf --base /tmp/aa-caching-u0nkahl3 --skip-kernel-load -M ./features_files/features.all --cache-loc /tmp/aa-caching-u0nkahl3/cache --cache-loc /tmp/aa-caching-u0nkahl3/aa-alt-cachebwg43d16 -q --write-cache -r /tmp/aa-caching-u0nkahl3/sbin.pingy
Output: AppArmor parser error for /tmp/aa-caching-u0nkahl3/sbin.pingy in /tmp/aa-caching-u0nkahl3/suid-abstraction at line 3: Invalid capability setuid.Forcing the package to build breaks snaps
$ snap run spotify snap-confine has elevated permissions and is not confined but should be. Refusing to continue to avoid permission escalation attacks
usysconf is not happy either
[✗] Compiling and Reloading AppArmor profiles failed A copy of the command output follows: AppArmor parser error for /etc/apparmor.d/bin.ping in /etc/apparmor.d/abstractions/nis at line 14: Invalid capability net_bind_service. failed to update AppArmor profile, reason: exit status 1
Making this task to get more eyes on the issue. My knowledge of apparmor and snaps is very thin.