Hello,
I am currently working on developing a prometheus exporter snap for chrony. This exporter needs to access the chrony command socket located at /run/chrony/chronyd.sock
on the host. I tried to use the system-files
interface, but the socket file /run/chrony/chronyd.sock
is owned by the _chrony:_chrony
. And, the snap app lacks the cap_dac_override
capability, and the seccomp filter prevents it from setuid to _chrony
. As a result, the snap is unable to read the file. Does anyone know is there a configuration in snap that would allow this kind of access?
Thanks!