Is there doc that I’m failing to find that shows what I need to do to enable access to services such as AT-SPI?
My app/snap relies on access to the accessibility features of AT-SPI to both read and write data, such as monitor when the current application has changed, look for accessible editable controls, and depending text entered change the contents when the user triggers the action.
With a .deb this is working fine for native apps that support the atspi2 framework, even LibreOffice when using the fully GTK3 enabled variant.
However, I’m getting lots of AppArmor “DENIED” when using the snap, for example this is the kind of stuff I get when just starting the app.
Apr 26 09:13:43 ubuntu-vm audit[2055]: AVC apparmor="DENIED" operation="connect" profile="snap.snippetpixie.snippetpixie" name="/run/user/1000/at-spi2-KWDZ0Z/socket" pid=2055 comm="com.github.byte" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=1000
Apr 26 09:13:43 ubuntu-vm kernel: audit: type=1400 audit(1556266423.291:76): apparmor="DENIED" operation="connect" profile="snap.snippetpixie.snippetpixie" name="/run/user/1000/at-spi2-KWDZ0Z/socket" pid=2055 comm="com.github.byte" requested_mask="wr" denied_mask="wr" fsuid=1000 ouid=1000
When LibreOffice Writer becomes the active app, I get lots of stuff like the following…
Apr 26 09:14:26 ubuntu-vm dbus-daemon[1226]: apparmor="DENIED" operation="dbus_method_call" bus="accessibility" path="/org/a11y/atspi/accessible/root" interface="org.a11y.atspi.Application" member="GetApplicationBusAddress" mask="send" name=":1.27" pid=2055 label="snap.snippetpixie.snippetpixie" peer_pid=2179 peer_label="libreoffice-soffice"
Apr 26 09:14:26 ubuntu-vm dbus-daemon[1226]: apparmor="DENIED" operation="dbus_method_call" bus="accessibility" path="/org/a11y/atspi/cache" interface="org.a11y.atspi.Cache" member="GetItems" mask="send" name=":1.27" pid=2055 label="snap.snippetpixie.snippetpixie" peer_pid=2179 peer_label="libreoffice-soffice"
Apr 26 09:14:27 ubuntu-vm dbus-daemon[1226]: apparmor="DENIED" operation="dbus_signal" bus="accessibility" path="/org/a11y/atspi/accessible/1" interface="org.a11y.atspi.Event.Object" member="StateChanged" name=":1.27" mask="receive" pid=2055 label="snap.snippetpixie.snippetpixie" peer_pid=2179 peer_label="libreoffice-soffice"
I’m using the following plugs in my snap…
- desktop
- desktop-legacy
- gsettings
- unity7
- wayland
- home
I’ve tried adding the following two, but get exact same behaviour…
- x11
- spi
spi
was a bit of a long shot for sure!
Testing on Ubunut 18.04.2.
Any help very much appreciated!