Possibly erroneous apparmor denial

snapd
1

When playing videos in vlc snap I get this apparmor denial in my logs. Yet vlc has the screen-inhibit-control plug specified, which is auto connected. Is this something we can fix?

$ snap version
snap    2.29.3
snapd   2.29.3
series  16
ubuntu  16.04
kernel  4.10.0-39-generic

$ snap interfaces | grep screen-inhibit
:screen-inhibit-control          brave,chromium,clementine,discord,duckmarines,mailspring,mrrescue,vlc,wire,yakyak

Time: Nov 17 15:39:58
Log: apparmor="DENIED" operation="dbus_method_call"  bus="session" path="/ScreenSaver" interface="org.freedesktop.ScreenSaver" member="Inhibit" mask="send" name="org.freedesktop.ScreenSaver" pid=28065 label="snap.vlc.vlc" peer_pid=14885 peer_label="unconfined"
DBus access
Suggestion:
* try adding 'screen-inhibit-control' to 'plugs'
2

We have a rule for path=/{,org/freedesktop/,org.gnome/}Screensaver, but the denial is for path=/ScreenSaver (notice Screensaver vs ScreenSaver). Something must’ve changed recently (SRU, 16.04 vs 17.10, etc). I’ll adjust the interface for this.

3

FYI, https://github.com/snapcore/snapd/pull/4245

1 Like
4

This is going to be fixed differently via https://github.com/snapcore/snapd/pull/4255.