[Bug 1967632] Re: [snap] apparmor denied when trying to load pkcs11 module for smart card authentication

[Douglas E Engert]

"If canonical wants to deploy ubuntu in enterprise with a lot of card reader usages, this is a critical bug." 
I agree. 

The also need to keep in mind, that enterprises may also use smartcards for login which implies pcscd
needs to be run as root as pam modules will need access to it, during login. There should be only one pcscd running. i.e. don't try and put pcscd in a snap package. As there should only be one pcscd running on a system. Pcscd's primary function is to lock access to the card over a set of APDU commands. 
See  https://pcscworkgroup.com/

Some smart card vendors provide their own PKCS11 modules and users may
be need t uses thes via FireFox, either the sanp version or as suggested
a "non-snap official firefox package".

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/1967632

Title:
  [snap] apparmor denied when trying to load pkcs11 module for smart
  card authentication

To manage notifications about this bug go to:
https://bugs.launchpad.net/firefox/+bug/1967632/+subscriptions