Apparmor denies a snap

I’m trying to connect to a rockchip rk3399 device (helm v2) and it tells me I need to use rkdeveloptool. It’s on snap, so I installed the snap. Everything seemed to be going well, but then apparmor denied access:

Feb 20 23:59:38 flarefox systemd[1]: Started snap.rkdeveloptool.rkdeveloptool-92ed0b2d-0f22-491e-ad18-c12e48aa2112.scope. Feb 20 23:59:38 flarefox systemd[1]: snap.rkdeveloptool.rkdeveloptool-92ed0b2d-0f22-491e-ad18-c12e48aa2112.scope: Deactivated successfully. Feb 20 23:59:38 flarefox kernel: [173181.525951] audit: type=1400 audit(1708502378.883:113): apparmor=“DENIED” operation=“open” class=“file” profile=“snap.rkdeveloptool.rkdeveloptool” name=“/home/flarefox/Devel/otherGit/helm/helm-loader-build-38.bin” pid=432584 comm=“rkdeveloptool” requested_mask=“r” denied_mask=“r” fsuid=0 ouid=1000

It has these connections: $ snap connections rkdeveloptool Interface Plug Slot Notes home rkdeveloptool:home :home - network rkdeveloptool:network :network - network-bind rkdeveloptool:network-bind :network-bind - raw-usb rkdeveloptool:raw-usb :raw-usb manual removable-media rkdeveloptool:removable-media - -

I allowed it to connect to raw-usb with: snap connect rkdeveloptool:raw-usb

It says the profile it’s using is snap.rkdeveloptool.rkdeveloptool and most of the other posts I’ve seen dealing with stuff like this say to tweak the profile to add something to it. However, I don’t see it anywhere in the /etc/apparmor.d directory. The only file about snap anything I see in that directory is usr.lib.snapd.snap-confine.real

Does anyone know what I need to change to get it to allow rkdeveloptool to work? Thank you for any help!

The denial is not about raw usb access

Is /home/flarefox/Devel/otherGit/helm/helm-loader-build-38.bin owned by root?

oh…that did it. Thank you! Sorry. It was readable by root, but not owned by root. Thank you very much!