[Bug 1787324] [NEW] Snap policy module denies recording access to classic snaps

Launchpad Bug Tracker 1787324 at bugs.launchpad.net
Tue Aug 28 16:21:07 UTC 2018

You have been subscribed to a public bug by Ubuntu Foundations Team Bug Bot (crichton):

With the recent updates to the snap policy module, recording access is
denied to clients with a snap AppArmor label when that snap doesn't have
a connected plug for "pulseaudio" or "audio-record".

This is not appropriate for classic confinement snaps, which will have
an AppArmor label but should still have access to recording even when
there is no plug, as described by @jdstrand:


This is broken with the 1:12.2-0ubuntu2 release, as can be seen with

    $ aa-exec -p snap.skype.skype /usr/bin/parecord foo.wav
    Stream error: Access denied

[note that the Skype app itself still functions because it bypasses
PulseAudio all together]

The above command should result in audio being recorded from the

** Affects: pulseaudio (Ubuntu)
     Importance: High
     Assignee: James Henstridge (jamesh)
         Status: Confirmed

** Tags: patch
Snap policy module denies recording access to classic snaps
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.

More information about the Ubuntu-sponsors mailing list