can you still try attaching to this colord with gdb.... also run "logprof" to see if apparmor recorded a permission denied event.