Hello,
I am currently working on developing a prometheus exporter snap for chrony. This exporter needs to access the chrony command socket located at /run/chrony/chronyd.sock on the host. I tried to use the system-files interface, but the socket file /run/chrony/chronyd.sock is owned by the _chrony:_chrony. And, the snap app lacks the cap_dac_override capability, and the seccomp filter prevents it from setuid to _chrony. As a result, the snap is unable to read the file. Does anyone know is there a configuration in snap that would allow this kind of access?
Thanks!