@jakolehm can you please outline why access to $HOME/.config
is required? This provides access to the configuration for many other applications which the user has installed - can this instead be changed to a more specific location?
Also the I notice in an older version of the snap, you used the name kube-config
for this instance of personal-files
- however this is not very descriptive - since this not only provides access to $HOME/.kube
but also to $HOME/.aws
and $HOME/.azure
etc.
Instead this should be broken into a few separate instances of personal-files
which each convey to the user who is connecting them what exactly is being granted. So better would be something like a name of dot-aws-config-credentials
for the $HOME/.aws
access and something similar for $HOME/.azure
.