dbus api is not exposed on ubuntu touch

[jmlich]

It seems apparmor prevents creating dbus service on ubuntu touch.

Steps to reproduce

$ busctl --user get-property io.github.rinigus.PureMaps /io/github/rinigus/PureMaps/navigator io.github.rinigus.PureMaps.navigator manDist

Expected result:

s "-"

Current result:

Failed to get property manDist on interface io.github.rinigus.PureMaps.navigator: The name io.github.rinigus.PureMaps was not provided by any .service files

It seems there isn't any suitable apparmor group at https://gitlab.com/ubports/development/core/apparmor-easyprof-ubuntu/-/tree/main/data/policygroups/ubuntu/20.04

It worked when I replaced click/pure-maps.apparmor with

{
    "policy_groups": [
    ],
    "policy_version": 20.04,
    "template": "unconfined"
}

and recompiled with skip-review flag like this clickable build --arch arm64 --app --skip-review.

My use case is passing navigation instructions to PineTime and I am trying to figure out why it doesn't work. See https://github.com/piggz/harbour-amazfish/blob/dbd7a48151712cdce9898f542998ec425b967c01/daemon/src/navigationinterface.cpp#L88C38-L88C45

[rinigus]

I remember hearing about dbus limitations on UT. Not much I can do about it on Pure Maps side. Please file it on UT bug reports (assuming that there is somewhere to report it)

[jmlich]

I have created an issue at https://gitlab.com/ubports/development/core/apparmor-easyprof-ubuntu/-/issues/20

The app can be compiled and published in app store with unconfined template. To publish such app you have to ask @bhdouglass at telegram group https://open-store.io/telegram

[jonnius]

We can't make all apps unconfined light-hearted. So far I didn't see a specific use case for the D-BUS interface on Ubuntu Touch and therefore no need to solve the issue. With your work on the smart watch support, this has changed.

I would prefer to have a policy and keep it confined. We could publish another "Pure Maps Unconfined" until it is available. I am hesitant to just make Pure Maps unconfined, but will bring the discussion into the Open Store group as well.

[jmlich]

Well the use case is pure-maps provides navigation instructions (e.g. in "200 m turn left") via dbus to amazfish, Amazfish sends navigation instructions to PineTime.

[jonnius]

Well, that sounds like a good reason to provide an unconfined variant of the app and lobby for a new AppArmor policy, too. A PR for adding another clickable config would be welcome. I am not sure when I'd find the time myself.