Confinement for a grep-type snap

snapcraft
1

Hi,
wanted to ask for advice - I’m maintaining the snap rg for ripgrep, a rust-based grep alternative. Up to this point it was build using strict confinement, but users want to be able to grep things like temporary files in /tmp and logs in /var/log and that results in permission denied (obviously). My question is - is classic confinement the only solution?

Thank you,
Domas

2

I couldn’t think of a suitable non-classic way to snap ag, so I’m also keen to hear suggestions about this.

1 Like