I had a go writing a custom interface to allow thumbnailer to access the
private files of another snap here:

https://github.com/snapcore/snapd/pull/2783

Unfortunately access to ~/snap/$name is also guarded by the "owner"
modifier, so it suffers from the same problems as checking for access
granted by the home interface.  So this will be a problem on systems
built on core as well as classic desktops.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1620635

Title:
  libapparmor's aa_query_label() always returns allowed = 0 for file
  rules containing the "owner" conditional

To manage notifications about this bug go to:
https://bugs.launchpad.net/apparmor/+bug/1620635/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to