Comment 20 for bug 1784774

I got exactly the same errors as Miles above; a simple permission denied error stopping things before AppArmor got involved.

I.e., the answer to Markus Kuhn's question is no, in fact even in enforce mode there are no denied apparmor complaints.

I don't know whether this is because the gating problem is not being able to read the ticket in /tmp, or whether being in the kernel solves some of the apparmor issues, but the greater pickiness of kerberos user definition is an issue. Do snaps run as a different uid?