[snap] Firefox Sync does not work because Apparmour prevents access to gnome-keyring

Bug #1815920 reported by Amr Ibrahim on 2019-02-14
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
epiphany-browser (Ubuntu)
Low
Unassigned

Bug Description

The GNOME Web (epiphany) snap does not have access to gnome-keyring, so it cannot save the credentials of Firefox Sync.

Here is the terminal output of:
1. Start epiphany snap
2. Go to Preferences → Sync
3. Add the account credentials
4. Confirm the email

~$ snap run epiphany

** (epiphany:4399): WARNING **: 16:30:20.866: Failed to start web extension server on unix:tmpdir=/tmp: Error binding to address: Permission denied

** (WebKitWebProcess:4524): WARNING **: 16:30:21.427: UI process did not start D-Bus server, giving up.

(epiphany:4399): GLib-GIO-WARNING **: 16:30:46.622: Error creating IO channel for /proc/self/mountinfo: Permission denied (g-file-error-quark, 2)

** (epiphany:4399): WARNING **: 16:30:46.772: Failed to load ISO-639 codes from /build/epiphany/parts/epiphany/install/usr/share/xml/iso-codes/iso_639.xml!

** (epiphany:4399): WARNING **: 16:30:46.772: Failed to load ISO-3166 codes from /build/epiphany/parts/epiphany/install/usr/share/xml/iso-codes/iso_3166.xml!

** Message: 16:31:14.763: Remote error from secret service: org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient; type="method_call", sender=":1.114" (uid=1000 pid=4399 comm="epiphany " label="snap.epiphany.epiphany (enforce)") interface="org.freedesktop.Secret.Service" member="OpenSession" error name="(unset)" requested_reply="0" destination=":1.20" (uid=1000 pid=1582 comm="/usr/bin/gnome-keyring-daemon --daemonize --login " label="unconfined")

** (epiphany:4399): WARNING **: 16:31:14.763: Failed to store sync secrets: An AppArmor policy prevents this sender from sending this message to this recipient; type="method_call", sender=":1.114" (uid=1000 pid=4399 comm="epiphany " label="snap.epiphany.epiphany (enforce)") interface="org.freedesktop.Secret.Service" member="OpenSession" error name="(unset)" requested_reply="0" destination=":1.20" (uid=1000 pid=1582 comm="/usr/bin/gnome-keyring-daemon --daemonize --login " label="unconfined")

(epiphany:4399): Gtk-CRITICAL **: 16:33:13.256: gtk_notebook_get_tab_label: assertion 'list != NULL' failed

(epiphany:4399): Gtk-CRITICAL **: 16:33:13.328: gtk_notebook_get_tab_label: assertion 'list != NULL' failed

(epiphany:4399): Gtk-CRITICAL **: 16:33:13.339: gtk_notebook_get_tab_label: assertion 'list != NULL' failed

(epiphany:4399): Gtk-CRITICAL **: 16:33:13.352: gtk_notebook_get_tab_label: assertion 'list != NULL' failed

(epiphany:4399): Gtk-CRITICAL **: 16:33:13.363: gtk_notebook_get_tab_label: assertion 'list != NULL' failed

summary: - [snap] Firefox Sync does not work because App armour prevents access to
+ [snap] Firefox Sync does not work because Apparmour prevents access to
gnome-keyring
Sebastien Bacher (seb128) wrote :

The snap has a password management interface but it's not autoconnected, you should be able to enable it from gnome-software epiphany's detail page (it has an interfaces button). Could you try if that makes it work for you?

Changed in epiphany-browser (Ubuntu):
importance: Undecided → Low
status: New → Confirmed
Amr Ibrahim (amribrahim1987) wrote :

OK, I turned on the password management interface from gnome-software, and now syncing has partially worked. The Epiphany snap could sync bookmarks and history, but not passwords from Firefox. I tried to log into Outlook and Gmail but the Epiphany snap did not have the passwords synced from Firefox, the Epiphany deb does that correctly, it knows about the passwords synced from Firefox.

Another point is that the password management interface is not persistent in gnome-software. It appears off even after I turn it on then close and reopen the Permissions window in gnome-software.

To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers