AppArmor denials for snap-store on Lubuntu 18.04 LTS

I installed snapd from apt, and then installed snap-store using sudo snap install snap-store. Trying to execute snap-store from the terminal results in a variety of apparmor denials, which cause snap-store to exit.

Nov 04 11:53:33 ideapad audit[1378]: AVC apparmor="DENIED" operation="open" profile="snap.snap-store.snap-store" name="/home/kolbe/Documents/" pid=1378 comm="head" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Nov 04 11:53:33 ideapad kernel: audit: type=1400 audit(1572897213.419:27): apparmor="DENIED" operation="open" profile="snap.snap-store.snap-store" name="/home/kolbe/Documents/" pid=1378 comm="head" requested_mask="r" denied_mask="r" fsuid=1000 ouid=1000
Nov 04 11:53:35 ideapad audit[1269]: AVC apparmor="DENIED" operation="open" profile="snap.snap-store.snap-store" name="/etc/xdg/lubuntu/applications/" pid=1269 comm="snap-store" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Nov 04 11:53:35 ideapad audit[1269]: AVC apparmor="DENIED" operation="open" profile="snap.snap-store.snap-store" name="/etc/xdg/lubuntu/applications/defaults.list" pid=1269 comm="snap-store" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Nov 04 11:53:35 ideapad kernel: audit: type=1400 audit(1572897215.263:28): apparmor="DENIED" operation="open" profile="snap.snap-store.snap-store" name="/etc/xdg/lubuntu/applications/" pid=1269 comm="snap-store" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Nov 04 11:53:35 ideapad kernel: audit: type=1400 audit(1572897215.263:29): apparmor="DENIED" operation="open" profile="snap.snap-store.snap-store" name="/etc/xdg/lubuntu/applications/defaults.list" pid=1269 comm="snap-store" requested_mask="r" denied_mask="r" fsuid=1000 ouid=0
Nov 04 11:55:06 ideapad dbus-daemon[1070]: [session uid=1000 pid=1070] Failed to activate service 'org.freedesktop.Notifications': timed out (service_start_timeout=120000ms)

I installed Lubuntu 18.04, installed snapd, and installed snap-store, and then launched it from a terminal. It started with no issues, despite these same messages appearing in the journal.
So it’s something else.

@chipaca do you have idea why snap-store tries to access Documents folder?

I imagine it’s the desktop launcher doing more than is strictly necessary, but don’t know. A question for the snap authors.

OK, cool, so the problem is something other than the AppArmor issues. I found that the snap-store GUI starts up fine if I boot into a graphical target and log in to X using lightdm, so there’s something else going on. I’ll do a bit more investigation and open another issue.

Are you trying to start snap-store remotely using ssh -X? If so, please see X11 Forwarding using SSH

No, I’m trying to start it from a terminal emulator running under a VNC server. No SSH involved.