Sandbox prevent file read?

mangOH Yellow
1

Hi,

I was trying to connect to a 3rd party MQTT server and had to add a private CA to the ca-certificates.crt file, so I added the cert and uploaded to the mangoh yellow board. But after that, I cannot connect as I’m getting the following errors:

Mar 15 17:29:39 swi-mdm9x28-wp user.notice kernel: [16173.861156] audit: type=1400 audit(1615847379.191:46): lsm=SMACK fn=smack_inode_getattr action=denied subject=“app.requestController” object=“admin” requested=r pid=17075 comm=“mqttClientServi” path=“pipe:[194068]” dev="pipe
Mar 15 17:29:40 swi-mdm9x28-wp user.notice kernel: [16175.042740] audit: type=1400 audit(1615847380.371:47): lsm=SMACK fn=smack_inode_permission action=denied subject=“app.requestController” object=“admin” requested=x pid=17075 comm=“mqttClientServi” name=“ssl” dev=“ubifs” ino=
Mar 15 17:29:41 swi-mdm9x28-wp user.notice kernel: [16176.044736] audit: type=1400 audit(1615847381.371:48): lsm=SMACK fn=smack_inode_permission action=denied subject=“app.requestController” object=“admin” requested=x pid=17075 comm=“mqttClientServi” name=“ssl” dev=“ubifs” ino=

Is this because the app cannot read the partition. I note that the original folder is mostly file links to a different location.

lrwxrwxrwx 1 root root 74 Mar 2 13:07 c089bbbd.0 → …/…/…/usr/share/ca-certificates/mozilla/thawte_Primary_Root_CA_-G2.crt
lrwxrwxrwx 1 root root 107 Mar 2 13:07 c0ff1f52.0 → …/…/…/usr/share/ca-certificates/mozilla/Verisign_Class_3_Public_Primary_Certification_Authority-G3.crt
lrwxrwxrwx 1 root root 77 Mar 2 13:07 c28a8a30.0 → …/…/…/usr/share/ca-certificates/mozilla/D-TRUST_Root_Class_3_CA_2_2009.crt
lrwxrwxrwx 1 root root 79 Mar 2 13:07 c47d9980.0 → …/…/…/usr/share/ca-certificates/mozilla/Chambers_of_Commerce_Root-_2008.crt
lrwxrwxrwx 1 root root 57 Mar 2 13:07 c5d3212a.0 → …/…/…/usr/share/ca-certificates/mozilla/PSCProcert.crt
lrwxrwxrwx 1 root root 74 Mar 2 13:07 c9f83a1c.0 → …/…/…/usr/share/ca-certificates/mozilla/Comodo_Secure_Services_root.crt
-rwxrwxrwx 1 root root 234846 Mar 15 17:12 ca-certificates.crt
lrwxrwxrwx 1 root root 80 Mar 2 13:07 ca6e4ad9.0 → …/…/…/usr/share/ca-certificates/mozilla/ePKI_Root_Certification_Authority.crt
lrwxrwxrwx 1 root root 81 Mar 2 13:07 cb59f961.0 → …/…/…/usr/share/ca-certificates/mozilla/Camerfirma_Global_Chambersign_Root.crt
lrwxrwxrwx 1 root root 67 Mar 2 13:07 cbeee9e2.0 → …/…/…/usr/share/ca-certificates/mozilla/GeoTrust_Global_CA_2.crt

Is there a better way to approach adding the crt file, or do I simply need to give my app permission to go to a new directory? Thanks!

2

does it work when unsandboxed?

You might see here on how to change the permission for accessing file outside sandbox:

3

It does work when unsandboxed.

Ideally, I want to revert all changes in the USER1 partition. Can I do this without a linux physical PC? I only have a VM running here with ubuntu on it.

I found this post: Unable to erase USER1 partition - #6 by tanoue - Legato Application Framework - Legato Forum

method2: “fdt2.exe” with .spk file can be run on a windows PC, but i dont think that if i use the spk file downloaded from source.sierrawireless.com that its actually erasing the user partition?

4

You need to downgrade your wp76 to r12 and use swiflash to erase user partition