Just turned clamtk-rs to strict confinement

store-requests privileged-interfaces
1

I changed clamtk-rs confinement to strict, no need for classic approval.

it now bundles clamav.

it seems to require sudo snap connect clamtk-rs:mount-observe to avoid a GTK warning.

Could someone review the snap?

2

This request has been added to the queue for review by the @reviewers team.

3

Hi @lapisdecor,

To make the review of your request easier, please use the following template to provide all the required details and also include any other information that may be relevant:

name: name of the snap
description: description of the snap
snapcraft: link to snapcraft.yaml if publicly available
upstream: link to the upstream repository if open-source or ‘PRIVATE’ otherwise
upstream-relation: relation of the snap publisher with the upstream
plugs:
  <interface-name>:
    interface: [optional] one of https://snapcraft.io/docs/reference/interfaces/
    attributes: [optional] interface attributes if any
    request-type: installation | manual-connection | auto-connection
    reasoning: why is this interface needed
  ...
slots:
  <interface-name>:
    interface: [optional] one of https://snapcraft.io/docs/reference/interfaces/
    attributes: [optional] interface attributes if any
    request-type: installation | manual-connection | auto-connection
    reasoning: why is this interface needed
  ...

For quick reference, you can also find this info - plus an example - right when creating a ‘New Topic’ under the privileged-interfaces subcategory. Editing this forum post with new information is perfectly fine.

Thanks

4 
name: clamtk-rs
description: 
  Clamtk-rs is a lightweight, user-friendly graphical frontend for ClamAV
  written in Rust with GTK4. It provides on-demand virus scanning, virus
  signature updates (freshclam), a quarantine manager, scan history and
  detailed scan settings.
  
  The snap bundles its own ClamAV (clamscan and freshclam) and runs under
  strict confinement. Virus definitions are downloaded automatically on the
  first scan and can be refreshed from the Update Signatures page.

snapcraft: https://github.com/lapisdecor/clamtk-rs/blob/master/snap/snapcraft.yaml
upstream: https://github.com/lapisdecor/clamtk-rs
upstream-relation: developer
plugs:
  mount-observe:
    request-type: auto-connection
    reasoning: when scanning a dir I get this warning:
    (clamtk-rs:33132): GLib-GIO-WARNING **: 12:15:42.804: Error creating IO channel for /proc/self/mountinfo: Permission denied (g-file-error-quark, 2)
   removable-media:
   request-type: auto-connection
   reasoning: needed so user can scan external drives for virus
slots:
  clamtk-rs:
    request-type: auto-connection
    reasoning: to make plugs work?

NOTE: documentation is not very explicit with slots (or in my case I'm just dumb) but I do manually the following:
sudo snap connect clamtk-rs:mount-observe
sudo snap connect clamtk-rs:removable-media

and I wanted this to be done automatically so the snap don't show warnings in terminal and user can access drives other than main disk for virus scanning purposes.
Thanks