[Bug 1787324] Re: Snap policy module denies recording access to classic snaps

[Ubuntu Foundations Team Bug Bot]

The attachment "pulseaudio_12.2-0ubuntu2_12.2-0ubuntu3.diff" seems to be
a debdiff.  The ubuntu-sponsors team has been subscribed to the bug
report so that they can review and hopefully sponsor the debdiff.  If
the attachment isn't a patch, please remove the "patch" flag from the
attachment, remove the "patch" tag, and if you are member of the
~ubuntu-sponsors, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issue please contact him.]

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1787324

Title:
  Snap policy module denies recording access to classic snaps

Status in pulseaudio package in Ubuntu:
  Confirmed

Bug description:
  With the recent updates to the snap policy module, recording access is
  denied to clients with a snap AppArmor label when that snap doesn't
  have a connected plug for "pulseaudio" or "audio-record".

  This is not appropriate for classic confinement snaps, which will have
  an AppArmor label but should still have access to recording even when
  there is no plug, as described by @jdstrand:

  https://forum.snapcraft.io/t/pulseaudio-recording/6361/14?u=jamesh

  This is broken with the 1:12.2-0ubuntu2 release, as can be seen with
  e.g.:

      $ aa-exec -p snap.skype.skype /usr/bin/parecord foo.wav
      Stream error: Access denied

  [note that the Skype app itself still functions because it bypasses
  PulseAudio all together]

  The above command should result in audio being recorded from the
  microphone.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/pulseaudio/+bug/1787324/+subscriptions