Possibly erroneous apparmor denial

When playing videos in vlc snap I get this apparmor denial in my logs. Yet vlc has the screen-inhibit-control plug specified, which is auto connected. Is this something we can fix?

$ snap version
snap    2.29.3
snapd   2.29.3
series  16
ubuntu  16.04
kernel  4.10.0-39-generic
$ snap interfaces | grep screen-inhibit
:screen-inhibit-control          brave,chromium,clementine,discord,duckmarines,mailspring,mrrescue,vlc,wire,yakyak
Time: Nov 17 15:39:58
Log: apparmor="DENIED" operation="dbus_method_call"  bus="session" path="/ScreenSaver" interface="org.freedesktop.ScreenSaver" member="Inhibit" mask="send" name="org.freedesktop.ScreenSaver" pid=28065 label="snap.vlc.vlc" peer_pid=14885 peer_label="unconfined"
DBus access
* try adding 'screen-inhibit-control' to 'plugs'

We have a rule for path=/{,org/freedesktop/,org.gnome/}Screensaver, but the denial is for path=/ScreenSaver (notice Screensaver vs ScreenSaver). Something must’ve changed recently (SRU, 16.04 vs 17.10, etc). I’ll adjust the interface for this.

FYI, https://github.com/snapcore/snapd/pull/4245

1 Like

This is going to be fixed differently via https://github.com/snapcore/snapd/pull/4255.