Hi Sancho,

Thanks for reporting the bug.

The information Nathan requested would be very useful to get a better
understanding of the versions of packages and snaps installed. Would you
please provide it.

---

I used a daily installer image from 3 March to test if it is allowed to
make a call to `org.freedesktop.Secret.Service.ReadAlias`. If the
problem does relate recent system update on 12-03, then I expect it
would still work here on my older environment.

I tried access from within the firefox snap:

```
ubuntu@ubuntu:~$ snap run --shell firefox
ubuntu@ubuntu:/home/ubuntu$ gdbus call \
  --session \
  --dest org.freedesktop.secrets \
  --object-path /org/freedesktop/secrets \
  --method org.freedesktop.Secret.Service.ReadAlias \
  default

Error: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: 
An AppArmor policy prevents this sender from sending this message to this 
recipient; 
type="method_call", sender=":1.138" (uid=1000 pid=6794 comm="gdbus call 
--session --dest org.freedesktop.secrets" label="snap.firefox.firefox 
(enforce)") 
interface="org.freedesktop.Secret.Service" member="ReadAlias" error 
name="(unset)" requested_reply="0" 
destination="org.freedesktop.secrets" (uid=1000 pid=2653 
comm="/usr/bin/gnome-keyring-daemon --foreground --components" 
label="unconfined")

```

And also from within the brave snap:

```
snap run --shell brave
ubuntu@ubuntu:/home/ubuntu$ gdbus call \
  --session \
  --dest org.freedesktop.secrets \
  --object-path /org/freedesktop/secrets \
  --method org.freedesktop.Secret.Service.ReadAlias \
  default

Error: GDBus.Error:org.freedesktop.DBus.Error.AccessDenied: An AppArmor
policy prevents this sender from sending this message to this recipient;
type="method_call", sender=":1.140" (uid=1000 pid=10956 comm="gdbus call
--session --dest org.freedesktop.secrets" label="snap.brave.brave
(enforce)") interface="org.freedesktop.Secret.Service"
member="ReadAlias" error name="(unset)" requested_reply="0"
destination="org.freedesktop.secrets" (uid=1000 pid=2653
comm="/usr/bin/gnome-keyring-daemon --foreground --components"
label="unconfined")

```

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2143992

Title:
  AppArmor denies audio and secret service access for snaps (Ubuntu
  26.04)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/2143992/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to