Confinement exception needed for unity8-dash

[Paweł Stołowski]

When running unity8-dash confined by an apparmor profile (this feature is still in testing, silo 65), OA requests made by the dash on behalf of scopes are all rejected with the following error in unity8-dash.log:

RequestAccess failed: QDBusError("com.ubuntu.OnlineAccountsUi.InvalidApplication", "Invalid client application")

Here is the output of online-accounts-service in debug mode when it happens:

phablet@ubuntu-phablet:~$ OAU_LOGGING_LEVEL=2 OAU_DAEMON_TIMEOUT=9999 online-accounts-service
service.cpp 42 requestAccess Got request: QMap(("application", QVariant(QString, "com.ubuntu.scopes.youtube_youtube") ) ( "pid" , QVariant(uint, 2977) ) ( "provider" , QVariant(QString, "google") ) ( "serviceType" , QVariant(QString, "sharing") ) ( "windowId" , QVariant(uint, 2977) ) )
utils.cpp 49 apparmorProfileOfPeer App ID: "unity8-dash"
request-manager.cpp 113 runQueue Head: OnlineAccountsUi::Request(0x158f7d8)
mir-helper.cpp 151 session_event_callback Prompt Session state updated to 1
Loading module: 'libubuntu_application_api_touch_mirclient.so.3.0.0'
/usr/bin/online-accounts-ui: unrecognized option '--socket'
/usr/bin/online-accounts-ui: unrecognized option '--profile'
ui-server.cpp 103 onDataReady QMap(("code", QVariant(QString, "process") ) ( "data" , QVariant(QVariantMap, QMap(("application", QVariant(QString, "com.ubuntu.scopes.youtube_youtube") ) ( "pid" , QVariant(uint, 2977) ) ( "provider" , QVariant(QString, "google") ) ( "serviceType" , QVariant(QString, "sharing") ) ( "windowId" , QVariant(uint, 2977) ) ) ) ) ( "id" , QVariant(int, 0) ) ( "interface" , QVariant(QString, "com.ubuntu.OnlineAccountsUi") ) ( "profile" , QVariant(QString, "unity8-dash") ) )
Given applicationId doesn't match profile
request.cpp 272 fail "com.ubuntu.OnlineAccountsUi.InvalidApplication" "Invalid client application"
ui-proxy.cpp 186 onDataReady QMap(("code", QVariant(QString, "failed") ) ( "errmsg" , QVariant(QString, "Invalid client application") ) ( "errname" , QVariant(QString, "com.ubuntu.OnlineAccountsUi.InvalidApplication") ) ( "id" , QVariant(int, 0) ) ( "interface" , QVariant(QString, "com.ubuntu.OnlineAccountsUi") ) )
ui-proxy.cpp 377 ~UiProxy
mir-helper.cpp 151 session_event_callback Prompt Session state updated to 0
ui-server.cpp 86 ~UiServerPrivate
QProcess: Destroyed while process ("/usr/bin/online-accounts-ui") is still running.

The apparmor profile for unity8-dash is here: https://code.launchpad.net/~stolowski/unity8/apparmor-profile/+merge/272602