[Bug 1787324] [NEW] Snap policy module denies recording access to classic snaps

[Launchpad Bug Tracker]

You have been subscribed to a public bug by Ubuntu Foundations Team Bug Bot (crichton):

With the recent updates to the snap policy module, recording access is
denied to clients with a snap AppArmor label when that snap doesn't have
a connected plug for "pulseaudio" or "audio-record".

This is not appropriate for classic confinement snaps, which will have
an AppArmor label but should still have access to recording even when
there is no plug, as described by @jdstrand:

https://forum.snapcraft.io/t/pulseaudio-recording/6361/14?u=jamesh

This is broken with the 1:12.2-0ubuntu2 release, as can be seen with
e.g.:

    $ aa-exec -p snap.skype.skype /usr/bin/parecord foo.wav
    Stream error: Access denied

[note that the Skype app itself still functions because it bypasses
PulseAudio all together]

The above command should result in audio being recorded from the
microphone.

** Affects: pulseaudio (Ubuntu)
     Importance: High
     Assignee: James Henstridge (jamesh)
         Status: Confirmed


** Tags: patch
-- 
Snap policy module denies recording access to classic snaps
https://bugs.launchpad.net/bugs/1787324
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.