I’m trying to build a confined snap for the application “AusweisApp2”. This app can read the RFID-tag on the german “Personalausweis” with the help of “pcscd”. Without confinement the snap works perfectly but with confinement the card-reader on the usb port can’t be accessed. I fiddled a bit with my snaps apparmor-profile and the following rules work for the snap:
/run/pcscd/pcscd.comm rw, /run/udev/data/** r, /sys/bus/usb/devices/** r, /sys/devices/** r,
Which interfaces do i have to apply so that the snap can run in a confined context?