U2F not connected in snap package

[Robert Tharp]

U2F is not working for me when adding my gmail account to Thunderbird. I noticed that u2f-devices is not connected to the thunderbird snap. Running `snap connections thunderbird | grep u2f` returns nothing. Running `snap connect thunderbird:u2f-devices` returns: `error: snap "thunderbird" has no plug named "u2f-devices"`

Because the apt version of Thunderbird works fine for me, I think this is just a simple matter of adding the u2f-devices connection to the snap package.

[Sebastien Bacher (seb128)]

Thank you for your bug report. I don't have the hardware to try that but I added the plug to the snapcraft definition in beta, could you refresh to the beta channel snap, connect it manually (which should work) and see if the feature is working?

note that you might want to backup your ~/snap/thunderbird before or try with a new user if you want to avoid having your profile migrated to a new version since it will not be usable again with the stable version if you revert back later

[Sebastien Bacher (seb128)]

the change is also in the stable build now which should make easier to try

[Sebastien Bacher (seb128)]

is there any chance you could try if that's working for you?

[Robert Tharp (robtharp)]

I'm on version 91.6.1 and I can see the u2f-devices connection now, but it still isn't connecting to my u2f key. I'm not an expert at this so I don't know the next step. Is there a log I should check?

[Sebastien Bacher (seb128)]

Did you manually connect u2f-devices? it's not going to do it automatically
error would be in the journalctl output if any

[Robert Tharp (robtharp)]

journalctl shows an apparmor issue:

audit[9351]: AVC apparmor="DENIED" operation="open" profile="snap.thunderbird.thunderbird" name="/proc/sys/dev/i915/perf_stream_paranoid" pid=9351 comm=57656220436F6E74656E74 requested_mask="r" denied_mask="r" fsuid=1000 ouid=0

[Sebastien Bacher (seb128)]

Is that still an issue? Could you give some details about the ubikey you are using? What key model are you using and could you share the corresponding line from
$ lsusb
?

It could be that a specific device is missing from https://github.com/snapcore/snapd/blob/master/interfaces/builtin/u2f_devices.go

[Launchpad Janitor (janitor)]

[Expired for thunderbird (Ubuntu) because there has been no activity for 60 days.]