[snap] Firefox Sync does not work because Apparmour prevents access to gnome-keyring

[Amr Ibrahim]

The GNOME Web (epiphany) snap does not have access to gnome-keyring, so it cannot save the credentials of Firefox Sync.

Here is the terminal output of:
1. Start epiphany snap
2. Go to Preferences → Sync
3. Add the account credentials
4. Confirm the email

~$ snap run epiphany

** (epiphany:4399): WARNING **: 16:30:20.866: Failed to start web extension server on unix:tmpdir=/tmp: Error binding to address: Permission denied

** (WebKitWebProcess:4524): WARNING **: 16:30:21.427: UI process did not start D-Bus server, giving up.

(epiphany:4399): GLib-GIO-WARNING **: 16:30:46.622: Error creating IO channel for /proc/self/mountinfo: Permission denied (g-file-error-quark, 2)

** (epiphany:4399): WARNING **: 16:30:46.772: Failed to load ISO-639 codes from /build/epiphany/parts/epiphany/install/usr/share/xml/iso-codes/iso_639.xml!

** (epiphany:4399): WARNING **: 16:30:46.772: Failed to load ISO-3166 codes from /build/epiphany/parts/epiphany/install/usr/share/xml/iso-codes/iso_3166.xml!

** Message: 16:31:14.763: Remote error from secret service: org.freedesktop.DBus.Error.AccessDenied: An AppArmor policy prevents this sender from sending this message to this recipient; type="method_call", sender=":1.114" (uid=1000 pid=4399 comm="epiphany " label="snap.epiphany.epiphany (enforce)") interface="org.freedesktop.Secret.Service" member="OpenSession" error name="(unset)" requested_reply="0" destination=":1.20" (uid=1000 pid=1582 comm="/usr/bin/gnome-keyring-daemon --daemonize --login " label="unconfined")

** (epiphany:4399): WARNING **: 16:31:14.763: Failed to store sync secrets: An AppArmor policy prevents this sender from sending this message to this recipient; type="method_call", sender=":1.114" (uid=1000 pid=4399 comm="epiphany " label="snap.epiphany.epiphany (enforce)") interface="org.freedesktop.Secret.Service" member="OpenSession" error name="(unset)" requested_reply="0" destination=":1.20" (uid=1000 pid=1582 comm="/usr/bin/gnome-keyring-daemon --daemonize --login " label="unconfined")

(epiphany:4399): Gtk-CRITICAL **: 16:33:13.256: gtk_notebook_get_tab_label: assertion 'list != NULL' failed

(epiphany:4399): Gtk-CRITICAL **: 16:33:13.328: gtk_notebook_get_tab_label: assertion 'list != NULL' failed

(epiphany:4399): Gtk-CRITICAL **: 16:33:13.339: gtk_notebook_get_tab_label: assertion 'list != NULL' failed

(epiphany:4399): Gtk-CRITICAL **: 16:33:13.352: gtk_notebook_get_tab_label: assertion 'list != NULL' failed

(epiphany:4399): Gtk-CRITICAL **: 16:33:13.363: gtk_notebook_get_tab_label: assertion 'list != NULL' failed

[Sebastien Bacher (seb128)]

The snap has a password management interface but it's not autoconnected, you should be able to enable it from gnome-software epiphany's detail page (it has an interfaces button). Could you try if that makes it work for you?

[Amr Ibrahim (amribrahim1987)]

OK, I turned on the password management interface from gnome-software, and now syncing has partially worked. The Epiphany snap could sync bookmarks and history, but not passwords from Firefox. I tried to log into Outlook and Gmail but the Epiphany snap did not have the passwords synced from Firefox, the Epiphany deb does that correctly, it knows about the passwords synced from Firefox.

Another point is that the password management interface is not persistent in gnome-software. It appears off even after I turn it on then close and reopen the Permissions window in gnome-software.