You can manually add the rule
dbus send bus="system" path="/org/freedesktop/RealtimeKit1"
interface="org.freedesktop.RealtimeKit1"
member="MakeThreadRealtimeWithPID"
peer=(label="unconfined", name="org.freedesktop.RealtimeKit1"),
to the file
/var/lib/snapd/apparmor/profiles/snap.firefox.firefox
inside the rule block (look for profile) eg.
profile "snap.firefox.firefox" (attach_disconnected,mediate_deleted) {
# add rule here
the rule can be added before the includes, or after if you want (order
doesn't matter). Then dynamically load the profile, using
sudo apparmor_parser -r
/var/lib/snapd/apparmor/profiles/snap.firefox.firefox
you may (it will depend if FF will retry the interface after having been
denied) have to restart the firefox snap. This should get you past this
error, its possible you will get a different denial after.
I should note this is not a permanent change as the profile file is
generated by the snap/snapd.
If you run into more errors you can put the profile in complain mode by
adding the complain flag to the profile. This will make the profile log
denials without enforcing them.
eg.
profile "snap.firefox.firefox"
(attach_disconnected,mediate_deleted,complain) {
after doing this you will need to reload the profile using the
apparmor_parser command from above. It is important to note that this
means the firefox snap will not be secure, it will allow all accesses it
doesn't know about and log them.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1946536
Title:
Snap firefox - apparmor blocking usb audio
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1946536/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
