Activity log for bug #1638334

Date Who What changed Old value New value Message
2016-11-01 16:39:55 Jamie Strandboge bug added bug
2016-11-01 16:42:04 Jamie Strandboge description Steps to reproduce in an amd64 VM using amd64 RC2 from http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/: (grab ./mir-client_0.24.1_amd64.snap from https://code.launchpad.net/~kgunn72/+snap/mir-client) 1. install mir-libs: $ sudo snap install mir-libs --edge $ snap interfaces|grep mir mir-libs:mir-libs 2. install mir-kiosk $ sudo snap install mir-kiosk --edge $ snap interfaces|grep mir :opengl mir-kiosk mir-kiosk:mir - mir-libs:mir-libs mir-kiosk 3. install mir-client $ sudo snap install --dangerous ./mir-client_0.24.1_amd64.snap $ snap interfaces|grep mir: opengl mir-client,mir-kiosk mir-kiosk:mir mir-client mir-libs:mir-libs mir-kiosk At this point, 'snap interfaces' output is correct and everything should be auto-connected. The mir-client (plug side) has the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), However, the the mir-kiosk (slot side) does not have the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), WORKAROUND: disconnect and connect the interface manually: $ sudo snap disconnect mir-client:mir mir-kiosk:mir $ sudo snap connect mir-client:mir mir-kiosk:mir $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), Additional information: $ snap list Name Version Rev Developer Notes core 16.04.1 324 canonical - mir-client 0.24.1 x1 - mir-kiosk 0.1 1 albaguirre - mir-libs 0.1 1 albaguirre - pc 16.04-0.8 9 canonical - pc-kernel 4.4.0-45-3 34 canonical - $ sudo snap download mir-kiosk --edge $ cat ./mir-kiosk_1.assert ... type: snap-declaration format: 1 ... slots: mir: allow-connection: true Note, I also adjusted the snap declaration in the store to have: type: snap-declaration format: 1 ... slots: mir: allow-connection: true allow-auto-connection: true and it did not make a difference. Steps to reproduce in an amd64 VM using amd64 RC2 from http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/: (grab ./mir-client_0.24.1_amd64.snap from https://code.launchpad.net/~kgunn72/+snap/mir-client) 1. install mir-libs: $ sudo snap install mir-libs --edge $ snap interfaces|grep mir mir-libs:mir-libs 2. install mir-kiosk $ sudo snap install mir-kiosk --edge $ snap interfaces|grep mir :opengl mir-kiosk mir-kiosk:mir - mir-libs:mir-libs mir-kiosk 3. install mir-client $ sudo snap install --dangerous ./mir-client_0.24.1_amd64.snap $ snap interfaces|grep mir: opengl mir-client,mir-kiosk mir-kiosk:mir mir-client mir-libs:mir-libs mir-kiosk At this point, 'snap interfaces' output is correct and everything should be auto-connected. The mir-client (plug side) has the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), However, the the mir-kiosk (slot side) does not have the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), WORKAROUND: disconnect and connect the interface manually: $ sudo snap disconnect mir-client:mir mir-kiosk:mir $ sudo snap connect mir-client:mir mir-kiosk:mir $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), Additional information: $ snap list Name Version Rev Developer Notes core 16.04.1 324 canonical - mir-client 0.24.1 x1 - mir-kiosk 0.1 1 albaguirre - mir-libs 0.1 1 albaguirre - pc 16.04-0.8 9 canonical - pc-kernel 4.4.0-45-3 34 canonical - $ sudo snap download mir-kiosk --edge $ cat ./mir-kiosk_1.assert ... type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true Note, I also adjusted the snap declaration in the store to have: type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true     allow-auto-connection: true and it did not make a difference. Note that mir-client is locally installed and not pulled from the store.
2016-11-01 16:44:41 Jamie Strandboge description Steps to reproduce in an amd64 VM using amd64 RC2 from http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/: (grab ./mir-client_0.24.1_amd64.snap from https://code.launchpad.net/~kgunn72/+snap/mir-client) 1. install mir-libs: $ sudo snap install mir-libs --edge $ snap interfaces|grep mir mir-libs:mir-libs 2. install mir-kiosk $ sudo snap install mir-kiosk --edge $ snap interfaces|grep mir :opengl mir-kiosk mir-kiosk:mir - mir-libs:mir-libs mir-kiosk 3. install mir-client $ sudo snap install --dangerous ./mir-client_0.24.1_amd64.snap $ snap interfaces|grep mir: opengl mir-client,mir-kiosk mir-kiosk:mir mir-client mir-libs:mir-libs mir-kiosk At this point, 'snap interfaces' output is correct and everything should be auto-connected. The mir-client (plug side) has the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), However, the the mir-kiosk (slot side) does not have the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), WORKAROUND: disconnect and connect the interface manually: $ sudo snap disconnect mir-client:mir mir-kiosk:mir $ sudo snap connect mir-client:mir mir-kiosk:mir $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), Additional information: $ snap list Name Version Rev Developer Notes core 16.04.1 324 canonical - mir-client 0.24.1 x1 - mir-kiosk 0.1 1 albaguirre - mir-libs 0.1 1 albaguirre - pc 16.04-0.8 9 canonical - pc-kernel 4.4.0-45-3 34 canonical - $ sudo snap download mir-kiosk --edge $ cat ./mir-kiosk_1.assert ... type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true Note, I also adjusted the snap declaration in the store to have: type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true     allow-auto-connection: true and it did not make a difference. Note that mir-client is locally installed and not pulled from the store. Steps to reproduce in an amd64 VM using amd64 RC2 from http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/: (grab ./mir-client_0.24.1_amd64.snap from https://code.launchpad.net/~kgunn72/+snap/mir-client) 1. install mir-libs: $ sudo snap install mir-libs --edge $ snap interfaces|grep mir mir-libs:mir-libs 2. install mir-kiosk $ sudo snap install mir-kiosk --edge $ snap interfaces|grep mir :opengl mir-kiosk mir-kiosk:mir - mir-libs:mir-libs mir-kiosk 3. install mir-client $ sudo snap install --dangerous ./mir-client_0.24.1_amd64.snap $ snap interfaces|grep mir: opengl mir-client,mir-kiosk mir-kiosk:mir mir-client mir-libs:mir-libs mir-kiosk At this point, 'snap interfaces' output is correct and everything should be auto-connected. The mir-client (plug side) has the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), However, the the mir-kiosk (slot side) does not have the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start $ WORKAROUND: disconnect and connect the interface manually: $ sudo snap disconnect mir-client:mir mir-kiosk:mir $ sudo snap connect mir-client:mir mir-kiosk:mir $ grep 'label="snap.mir-client' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-client.client-start"), Additional information: $ snap list Name Version Rev Developer Notes core 16.04.1 324 canonical - mir-client 0.24.1 x1 - mir-kiosk 0.1 1 albaguirre - mir-libs 0.1 1 albaguirre - pc 16.04-0.8 9 canonical - pc-kernel 4.4.0-45-3 34 canonical - $ sudo snap download mir-kiosk --edge $ cat ./mir-kiosk_1.assert ... type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true Note, I also adjusted the snap declaration in the store to have: type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true     allow-auto-connection: true and it did not make a difference. Note that mir-client is locally installed and not pulled from the store.
2016-11-01 16:45:22 Jamie Strandboge description Steps to reproduce in an amd64 VM using amd64 RC2 from http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/: (grab ./mir-client_0.24.1_amd64.snap from https://code.launchpad.net/~kgunn72/+snap/mir-client) 1. install mir-libs: $ sudo snap install mir-libs --edge $ snap interfaces|grep mir mir-libs:mir-libs 2. install mir-kiosk $ sudo snap install mir-kiosk --edge $ snap interfaces|grep mir :opengl mir-kiosk mir-kiosk:mir - mir-libs:mir-libs mir-kiosk 3. install mir-client $ sudo snap install --dangerous ./mir-client_0.24.1_amd64.snap $ snap interfaces|grep mir: opengl mir-client,mir-kiosk mir-kiosk:mir mir-client mir-libs:mir-libs mir-kiosk At this point, 'snap interfaces' output is correct and everything should be auto-connected. The mir-client (plug side) has the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), However, the the mir-kiosk (slot side) does not have the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start $ WORKAROUND: disconnect and connect the interface manually: $ sudo snap disconnect mir-client:mir mir-kiosk:mir $ sudo snap connect mir-client:mir mir-kiosk:mir $ grep 'label="snap.mir-client' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-client.client-start"), Additional information: $ snap list Name Version Rev Developer Notes core 16.04.1 324 canonical - mir-client 0.24.1 x1 - mir-kiosk 0.1 1 albaguirre - mir-libs 0.1 1 albaguirre - pc 16.04-0.8 9 canonical - pc-kernel 4.4.0-45-3 34 canonical - $ sudo snap download mir-kiosk --edge $ cat ./mir-kiosk_1.assert ... type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true Note, I also adjusted the snap declaration in the store to have: type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true     allow-auto-connection: true and it did not make a difference. Note that mir-client is locally installed and not pulled from the store. Steps to reproduce in an amd64 VM using amd64 RC2 from http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/: (grab ./mir-client_0.24.1_amd64.snap from https://code.launchpad.net/~kgunn72/+snap/mir-client) 1. install mir-libs: $ sudo snap install mir-libs --edge $ snap interfaces|grep mir mir-libs:mir-libs 2. install mir-kiosk $ sudo snap install mir-kiosk --edge $ snap interfaces|grep mir :opengl mir-kiosk mir-kiosk:mir - mir-libs:mir-libs mir-kiosk 3. install mir-client $ sudo snap install --dangerous ./mir-client_0.24.1_amd64.snap $ snap interfaces|grep mir: opengl mir-client,mir-kiosk mir-kiosk:mir mir-client mir-libs:mir-libs mir-kiosk At this point, 'snap interfaces' output is correct and everything should be auto-connected. The mir-client (plug side) has the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), However, the the mir-kiosk (slot side) does not have the expected policy: $ grep 'label="snap.mir-client' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk $ WORKAROUND: disconnect and connect the interface manually: $ sudo snap disconnect mir-client:mir mir-kiosk:mir $ sudo snap connect mir-client:mir mir-kiosk:mir $ grep 'label="snap.mir-client' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-client.client-start"), Additional information: $ snap list Name Version Rev Developer Notes core 16.04.1 324 canonical - mir-client 0.24.1 x1 - mir-kiosk 0.1 1 albaguirre - mir-libs 0.1 1 albaguirre - pc 16.04-0.8 9 canonical - pc-kernel 4.4.0-45-3 34 canonical - $ sudo snap download mir-kiosk --edge $ cat ./mir-kiosk_1.assert ... type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true Note, I also adjusted the snap declaration in the store to have: type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true     allow-auto-connection: true and it did not make a difference. Note that mir-client is locally installed and not pulled from the store.
2016-11-01 16:51:22 Jamie Strandboge description Steps to reproduce in an amd64 VM using amd64 RC2 from http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/: (grab ./mir-client_0.24.1_amd64.snap from https://code.launchpad.net/~kgunn72/+snap/mir-client) 1. install mir-libs: $ sudo snap install mir-libs --edge $ snap interfaces|grep mir mir-libs:mir-libs 2. install mir-kiosk $ sudo snap install mir-kiosk --edge $ snap interfaces|grep mir :opengl mir-kiosk mir-kiosk:mir - mir-libs:mir-libs mir-kiosk 3. install mir-client $ sudo snap install --dangerous ./mir-client_0.24.1_amd64.snap $ snap interfaces|grep mir: opengl mir-client,mir-kiosk mir-kiosk:mir mir-client mir-libs:mir-libs mir-kiosk At this point, 'snap interfaces' output is correct and everything should be auto-connected. The mir-client (plug side) has the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), However, the the mir-kiosk (slot side) does not have the expected policy: $ grep 'label="snap.mir-client' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk $ WORKAROUND: disconnect and connect the interface manually: $ sudo snap disconnect mir-client:mir mir-kiosk:mir $ sudo snap connect mir-client:mir mir-kiosk:mir $ grep 'label="snap.mir-client' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-client.client-start"), Additional information: $ snap list Name Version Rev Developer Notes core 16.04.1 324 canonical - mir-client 0.24.1 x1 - mir-kiosk 0.1 1 albaguirre - mir-libs 0.1 1 albaguirre - pc 16.04-0.8 9 canonical - pc-kernel 4.4.0-45-3 34 canonical - $ sudo snap download mir-kiosk --edge $ cat ./mir-kiosk_1.assert ... type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true Note, I also adjusted the snap declaration in the store to have: type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true     allow-auto-connection: true and it did not make a difference. Note that mir-client is locally installed and not pulled from the store. Steps to reproduce in an amd64 VM using amd64 RC2 from http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/: (grab ./mir-client_0.24.1_amd64.snap from https://code.launchpad.net/~kgunn72/+snap/mir-client) 1. install mir-libs: $ sudo snap install mir-libs --edge $ snap interfaces|grep mir mir-libs:mir-libs 2. install mir-kiosk $ sudo snap install mir-kiosk --edge $ snap interfaces|grep mir :opengl mir-kiosk mir-kiosk:mir - mir-libs:mir-libs mir-kiosk 3. install mir-client $ sudo snap install --dangerous ./mir-client_0.24.1_amd64.snap $ snap interfaces|grep mir: opengl mir-client,mir-kiosk mir-kiosk:mir mir-client mir-libs:mir-libs mir-kiosk At this point, 'snap interfaces' output is correct and everything should be auto-connected. The mir-client (plug side) has the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), However, the the mir-kiosk (slot side) does not have the expected policy: $ grep 'label="snap.mir-client' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk $ WORKAROUND: disconnect and connect the interface manually: $ sudo snap disconnect mir-client:mir mir-kiosk:mir $ sudo snap connect mir-client:mir mir-kiosk:mir $ grep 'label="snap.mir-client' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-client.client-start"), Additional information: $ snap list Name Version Rev Developer Notes core 16.04.1 324 canonical - mir-client 0.24.1 x1 - mir-kiosk 0.1 1 albaguirre - mir-libs 0.1 1 albaguirre - pc 16.04-0.8 9 canonical - pc-kernel 4.4.0-45-3 34 canonical - Relevant content from interfaces/builtin/basedeclaration.go (ie, it is meant to allow auto-connection when a snap declaration for a slot implementation of mir has 'allow-connection: true' (which is why deny-auto-connection is omitted from the base declaration): mir: allow-installation: slot-snap-type: - app deny-connection: true $ sudo snap download mir-kiosk --edge $ cat ./mir-kiosk_1.assert ... type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true Note, I also adjusted the snap declaration in the store to have: type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true     allow-auto-connection: true and it did not make a difference. Note that mir-client is locally installed and not pulled from the store. The
2016-11-01 17:14:20 Jamie Strandboge description Steps to reproduce in an amd64 VM using amd64 RC2 from http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/: (grab ./mir-client_0.24.1_amd64.snap from https://code.launchpad.net/~kgunn72/+snap/mir-client) 1. install mir-libs: $ sudo snap install mir-libs --edge $ snap interfaces|grep mir mir-libs:mir-libs 2. install mir-kiosk $ sudo snap install mir-kiosk --edge $ snap interfaces|grep mir :opengl mir-kiosk mir-kiosk:mir - mir-libs:mir-libs mir-kiosk 3. install mir-client $ sudo snap install --dangerous ./mir-client_0.24.1_amd64.snap $ snap interfaces|grep mir: opengl mir-client,mir-kiosk mir-kiosk:mir mir-client mir-libs:mir-libs mir-kiosk At this point, 'snap interfaces' output is correct and everything should be auto-connected. The mir-client (plug side) has the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), However, the the mir-kiosk (slot side) does not have the expected policy: $ grep 'label="snap.mir-client' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk $ WORKAROUND: disconnect and connect the interface manually: $ sudo snap disconnect mir-client:mir mir-kiosk:mir $ sudo snap connect mir-client:mir mir-kiosk:mir $ grep 'label="snap.mir-client' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-client.client-start"), Additional information: $ snap list Name Version Rev Developer Notes core 16.04.1 324 canonical - mir-client 0.24.1 x1 - mir-kiosk 0.1 1 albaguirre - mir-libs 0.1 1 albaguirre - pc 16.04-0.8 9 canonical - pc-kernel 4.4.0-45-3 34 canonical - Relevant content from interfaces/builtin/basedeclaration.go (ie, it is meant to allow auto-connection when a snap declaration for a slot implementation of mir has 'allow-connection: true' (which is why deny-auto-connection is omitted from the base declaration): mir: allow-installation: slot-snap-type: - app deny-connection: true $ sudo snap download mir-kiosk --edge $ cat ./mir-kiosk_1.assert ... type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true Note, I also adjusted the snap declaration in the store to have: type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true     allow-auto-connection: true and it did not make a difference. Note that mir-client is locally installed and not pulled from the store. The Steps to reproduce in an amd64 VM using amd64 RC2 from http://cdimage.ubuntu.com/ubuntu-core/xenial/daily-preinstalled/current/: (grab ./mir-client_0.24.1_amd64.snap from https://code.launchpad.net/~kgunn72/+snap/mir-client) 1. install mir-libs: $ sudo snap install mir-libs --edge $ snap interfaces|grep mir mir-libs:mir-libs 2. install mir-kiosk $ sudo snap install mir-kiosk --edge $ snap interfaces|grep mir :opengl mir-kiosk mir-kiosk:mir - mir-libs:mir-libs mir-kiosk 3. install mir-client $ sudo snap install --dangerous ./mir-client_0.24.1_amd64.snap $ snap interfaces|grep mir: opengl mir-client,mir-kiosk mir-kiosk:mir mir-client mir-libs:mir-libs mir-kiosk At this point, 'snap interfaces' output is correct and everything should be auto-connected. The mir-client (plug side) has the expected policy: $ grep 'label="snap.mir-kiosk' /var/lib/snapd/apparmor/profiles/snap.mir-client.client-start unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-kiosk.mir-kiosk"), However, the the mir-kiosk (slot side) does not have the expected policy: $ grep 'label="snap.mir-client' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk $ WORKAROUND: disconnect and connect the interface manually: $ sudo snap disconnect mir-client:mir mir-kiosk:mir $ sudo snap connect mir-client:mir mir-kiosk:mir $ grep 'label="snap.mir-client' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk unix (receive, send) type=seqpacket addr=none peer=(label="snap.mir-client.client-start"), Additional information: $ snap list Name Version Rev Developer Notes core 16.04.1 324 canonical - mir-client 0.24.1 x1 - mir-kiosk 0.1 1 albaguirre - mir-libs 0.1 1 albaguirre - pc 16.04-0.8 9 canonical - pc-kernel 4.4.0-45-3 34 canonical - Relevant content from interfaces/builtin/basedeclaration.go (ie, it is meant to allow auto-connection when a snap declaration for a slot implementation of mir has 'allow-connection: true' (which is why deny-auto-connection is omitted from the base declaration):    mir:      allow-installation:        slot-snap-type:          - app      deny-connection: true $ sudo snap download mir-kiosk --edge $ cat ./mir-kiosk_1.assert ... type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true Note, I also adjusted the snap declaration in the store to have: type: snap-declaration format: 1 ... slots:   mir:     allow-connection: true     allow-auto-connection: true and it did not make a difference. Note, while mir-client above is locally installed, I created test-mir-client-jdstrand and uploaded to the store, and the ConnectedSlot policy is not correct: $ sudo snap install test-mir-client-jdstrand --edge test-mir-client-jdstrand (edge) 0 from 'jdstrand' installed $ grep 'label="snap.test-mir-client-jdstrand' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk $ $ sudo snap disconnect test-mir-client-jdstrand:mir mir-kiosk:mir $ sudo snap connect test-mir-client-jdstrand:mir mir-kiosk:mir $ grep 'label="snap.test-mir-client-jdstrand' /var/lib/snapd/apparmor/profiles/snap.mir-kiosk.mir-kiosk unix (receive, send) type=seqpacket addr=none peer=(label="snap.test-mir-client-jdstrand.sh"),
2016-11-01 17:15:03 Jamie Strandboge tags snapd-interface
2016-11-01 19:10:40 Zygmunt Krynicki snappy: status New Triaged
2016-12-09 14:37:57 Pat McGowan bug task added canonical-devices-system-image
2016-12-09 14:38:49 Pat McGowan canonical-devices-system-image: importance Undecided High
2016-12-09 14:38:49 Pat McGowan canonical-devices-system-image: status New In Progress
2016-12-09 14:38:49 Pat McGowan canonical-devices-system-image: milestone p1
2016-12-09 14:38:49 Pat McGowan canonical-devices-system-image: assignee Kevin Gunn (kgunn)
2016-12-09 14:39:39 Pat McGowan canonical-devices-system-image: assignee Kevin Gunn (kgunn) kevin gunn (kgunn72)
2016-12-09 14:39:55 Pat McGowan tags snapd-interface personal snapd-interface
2017-01-11 19:12:27 Pat McGowan canonical-devices-system-image: milestone p1 p2
2017-01-11 19:12:32 Pat McGowan snappy: status Triaged In Progress
2017-01-11 19:13:11 Pat McGowan snappy: assignee Alberto Aguirre (albaguirre)
2017-02-08 15:40:13 Kyle Nitzsche bug added subscriber Kyle Nitzsche
2017-05-17 20:29:59 Michał Sawicz canonical-devices-system-image: status In Progress Fix Released
2017-05-17 20:30:01 Michał Sawicz snappy: status In Progress Fix Released