Classic confinement request: avdl

[emitorino]

@darkdimension, hey

@darkdimension

I tried to make a snap out of a game that is written in the avdl language, and I used the avdl snap as a dependency. During the process of the snap being created, I got a permission error from avdl. This is when I started reading about the different confinements.

Any chance you can do this again while having snappy-debug running? It should provide useful suggestions about which interfaces you need.

@darkdimension

Off the top of my head, I think I remember snaps being compiled in a directory outside the user’s home one, so not sure if strict confinement with the home interface will be enough.

If avdl is not requiring access to specific locations in the system for the purpose of compilation (like header files), you should be able to plug other interfaces which can grant access to other locations from the system where users usually operate rather than home and keep under strict confinement. Have you explore personal-files or system-files?

@darkdimension

As a side note, the new build with classic confinement was rejected with the message AutomaticallyRejected. Let me know if I need to re-upload it, or follow different steps with a different confinement setup.

Yeah it will keep failing until we specifically grant it once we agree on requirements for classic confinement being understood.