I’m currently trying to make a snap for the pcsc-lite-daemon. The package works flawlessly when using “devmode” but i can’t make the daemon run when using strict confinement:
Mär 06 19:59:49 desktop audit[28118]: AVC apparmor="DENIED" operation="chmod" profile="snap.pcsc-lite.pcscd" name="/run/pcscd/" pid=28118 comm="pcscd" requested_mask="w" denied_mask="w" fsuid=0 o
Mär 06 19:59:49 desktop audit[28118]: AVC apparmor="DENIED" operation="mknod" profile="snap.pcsc-lite.pcscd" name="/run/pcscd/pcscd.pid" pid=28118 comm="pcscd" requested_mask="c" denied_mask="c"
Mär 06 19:59:49 desktop audit[28118]: AVC apparmor="DENIED" operation="mknod" profile="snap.pcsc-lite.pcscd" name="/run/pcscd/pcscd.comm" pid=28118 comm="pcscd" requested_mask="c" denied_mask="c"
Mär 06 19:59:49 desktop pcsc-lite.pcscd[28118]: 00000000 pcscdaemon.c:697:main() cannot create /var/run/pcscd/pcscd.pid: Permission denied
Mär 06 19:59:49 desktop pcsc-lite.pcscd[28118]: 00000033 winscard_msg_srv.c:148:InitializeSocket() Unable to bind common socket: Permission denied
Mär 06 19:59:49 desktop pcsc-lite.pcscd[28118]: 00000003 pcscdaemon.c:722:main() Error initializing pcscd.
Mär 06 19:59:49 desktop pcsc-lite.pcscd[28118]: 00000004 pcscdaemon.c:816:clean_temp_files() Cannot remove /var/run/pcscd/pcscd.comm: No such file or directory
Mär 06 19:59:49 desktop pcsc-lite.pcscd[28118]: 00000004 pcscdaemon.c:822:clean_temp_files() Cannot remove /var/run/pcscd/pcscd.pid: No such file or directory
Mär 06 19:59:49 desktop systemd[1]: snap.pcsc-lite.pcscd.service: Main process exited, code=exited, status=1/FAILURE
Mär 06 19:59:49 desktop systemd[1]: snap.pcsc-lite.pcscd.service: Failed with result 'exit-code'.
Mär 06 19:59:49 desktop systemd[1]: snap.pcsc-lite.pcscd.service: Service hold-off time over, scheduling restart.
Mär 06 19:59:49 desktop systemd[1]: snap.pcsc-lite.pcscd.service: Scheduled restart job, restart counter is at 5.
Here is my apps-section for the daemon:
apps:
pcscd:
command: usr/sbin/pcscd --foreground --auto-exit
daemon: simple
plugs:
- hardware-observe
- network
- network-bind