I am building a secure system, it allows installing additional apps using snap. However I want to restrict that system to only allow fully-confined snaps. How can I disable the installation of classic snaps. Is that something I can change during build time of snapd ?
You’d have to patch the snapstate code. The current code will disallow classic snaps only on a core system.
1 Like