Need Classic Confinement for Backslide

store
1 
sudo snap install backslide --classic --beta

my github repo: https://github.com/omairqazi/backslide
Find usage instructions by running command: backslide
This is a snap for backslide https://github.com/sinedied/backslide2
Backslide “CLI tool for making HTML presentations with Remark.js using Markdown https://sinedied.github.io/backslide”
Since this snap read and writes the snap outside the snap folder it needs the classic confinement or else the user will not be able to change the output directories and will not be able to create presentations and this snap will be of no use.

2

As discussed on IRC, I don’t think you need classic. Just strict with the home plug should be sufficient to allow the user to write in their home directory.

3

As discussed on IRC, changing the node-engine doesn’t work. Also, user can specify any output directory so it needs full access to the system.

4

I’d love to use your snap but can see no reason why a presentation tool would require unfettered access to my whole system. If it is genuinely impossible to run this app under strict confinement it would be highlighting deficiencies in the snap infrastructure which need fixed. However, I can’t see anything in your git commits to suggest you’ve exhausted possibilities of running this under strict with the home plug. Often a bit of tweaking is required to get something running in strict confinement but it is rare for an app to fail completely.

Please keep faith in strict and keep working on this, as I’d love it to be a working snap!

5

hi this is what snappy-dubug says @popey @elopio @kyrofa
= AppArmor =
Time: Jan 7 22:21:19
Log: apparmor=“DENIED” operation=“open” profile=“snap.backslide.backslide” name="/snap/" pid=17123 comm=“node” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
File: /snap/ (read)
Suggestion:

  • adjust program to read necessary files from $SNAP, $SNAP_DATA, $SNAP_COMMON, $SNAP_USER_DATA or $SNAP_USER_COMMON

= AppArmor =
Time: Jan 7 22:21:25
Log: apparmor=“DENIED” operation=“open” profile=“snap.backslide.backslide” name="/snap/" pid=17147 comm=“node” requested_mask=“r” denied_mask=“r” fsuid=1000 ouid=0
File: /snap/ (read)
Suggestion:

  • adjust program to read necessary files from $SNAP, $SNAP_DATA, $SNAP_COMMON, $SNAP_USER_DATA or $SNAP_USER_COMMON

= Seccomp =
Time: Jan 7 22:21:28
Log: auid=4294967295 uid=1000 gid=1000 ses=4294967295 pid=17147 comm=“node” exe="/snap/backslide/x1/bin/node" sig=31 arch=c000003e 92(chown) compat=0 ip=0x7fa87178a2c7 code=0x0
Syscall: chown
Suggestions:

thanks @mcphail

6

my program runs the first time but the second time it fails

7

Also i tried using snapcraft-preload it didnt work then i filled an issue(https://github.com/sergiusens/snapcraft-preload/issues/24) and got it working. But after using plugin also my snap doesn’t work :cry:

8

@popey The snap works with devmode. So i am releasing the snap to edge channel