Classic confinement request for LNXlink

store-requests classic-confinement
1

Hi, I’m the developer of LNXlink, a background service that connects a Linux machine with Home Assistant over MQTT. It currently has over 580 active users, which is part of why I’d like to get it properly distributed through the Snap Store.

  • name: lnxlink
  • description: A background service that connects a Linux machine with Home Assistant over MQTT. It exposes system sensors (CPU, memory, temperature, battery, network, etc.) and accepts commands to control things like media playback, notifications, screenshots, shutdown, brightness, keyboard/mouse input, and more.
  • snapcraft: lnxlink/packaging/snap/snapcraft.yaml at master · bkbilly/lnxlink · GitHub
  • upstream: https://github.com/bkbilly/lnxlink
  • upstream-relation: I am the developer and maintainer of the project
  • supported-category: tools
  • reasoning: Several modules require access that no existing snap interface covers. The most important is the bash module that the users can define custom sensors and controls that run arbitrary shell commands, making it impossible to declare a fixed set of allowed executables or paths upfront.

I understand that strict confinement is generally preferred over classic.

I’ve tried the existing interfaces to make the snap to work under strict confinement.

2

This request has been added to the queue for review by the @reviewers team.

3

Hello @bkbilly!

Classic confinement can be granted only for snaps that fall under one of the supported categories listed here. Given your snap’s functionality, it does not fit the criteria for an approved category, so we can not proceed with granting classic confinement (#reject).

If you want to continue in the Global store, the path forward is to redesign toward strict confinement with a bounded and auditable feature set, for example by removing arbitrary command execution and limiting control actions to narrowly defined operations that can be mapped to specific interfaces (such as system-observe, hardware-observe, or shutdown).

If you need further assistance, feel free to ping us :slight_smile:

4

Dear yomonokio,

As the arbitrary command execution is one of the key points of this app, I don’t think it is worth making a snap without the classic confinement for now.

Thank you for taking the time to check this.

1 Like