Classic confinement request: fce

[sparkiegeek]

The personal-files interface

The personal-files interface provides access to specified files in the user’s home directory, and consequently, gives privileged access to the user’s data. This interface is typically used to provide read-only access to top-level hidden data directories (directories starting with a dot) within a user’s real home directory in order to support importing data from existing applications where the snap is the clear owner of the target directory. By default, snaps have access to everything under ~/s…

The system-files interface

The system-files interface enables a snap to access specific system files and directories (such as files in /etc). Consequently, the interface can provide access to privileged system data and is not connected by default. This interface is typically used to provide read-only access to system configuration directories created by a non-snap version of an application now running from an equivalent snap. Example The Firefox, Chromium and Thunderbird snaps use this interface to enable access to sys…