As per the Process for reviewing classic confinement snaps, the requirement to write to arbitrary locations on the file-system is not sufficient for granting classic confinement override for a snap. Plugging home
(and optionally removable-media
) provides access to the vast majority of locations that users will require and using strict confinement provides additional benefits such as a stable runtime environment and isolation etc. As such, unfortunately I don’t think it is appropriate to grant classic confinement for curl
.
1 Like