Classic confinement request for Kyunnect

  • name: kyunnect
  • description: snapd interface/plug manager
  • snapcraft: Kyunnect/snapcraft.yaml at main · Kyuyrii/Kyunnect · GitHub
  • upstream: GitHub - Kyuyrii/Kyunnect: A Snapd interface/plug manager.
  • upstream-relation: I am the upstream.
  • supported-category: Honestly, I don’t know if there is a category for this app, since even the default Ubuntu doesn’t have an app like this, last time I checked this type of function was inside the Gnome settings app, which is not a Snap.
  • reasoning: This app solves a problem that exists in all flavors: it can manage most snapd plugs/interfaces. It lists Snap apps, except those that are also in the classic confinement or don’t have icons. It also allows you to connect or disconnect plugs.

I understand that strict confinement is generally preferred over classic.

I’ve tried the existing interfaces to make the snap to work under strict confinement.

If there is another way to make this app work, I would be happy to use it, but it is so specific that I have no idea if there is a way to make it work without the classic confinement.

This request has been added to the queue for review by the @reviewers team.

Hi @Kyuyrii!

As the project is still in its very early stages and appears to lack an active community, it should not be considered for classic confinement (#reject), regardless of whether it fits into a category or not. You can also check the reasoning for a similar case here : Classic confinement request for sx-server and sx-client.

1 Like

I wanted to post about it here precisely so you can see that it exists. And see if there’s anything wrong with it or if there’s a chance to make it work in strict mode.

I recently opened an issue about an interface/plug manager in the Desktop Security Center, but there were no plans to do that; they told me to use the Gnome Settings app.

That’s why this project exists, because the other DEs, that is, the other flavors, don’t have a way to manage Snap connections via the graphical interface, only a terminal, which isn’t ideal. And they know it’s not ideal, since the Gnome Settings app can handle it.

Such an app doesn’t need classic confinement at all, we have the snapd-control interface that allows your app access to the REST API of snapd to execute such actions (every snap command out there has a REST equivalent)…

That said, I don’t think that interface will be granted to non Canonical snaps in the global store since it gives you full device ownership…

(You could indeed just package the app as a deb and provide it from a PPA, that way you wouldn’t need any approval and could just use the REST socket)

1 Like