Problem with releasing kiosk app

[ogra]

an alternative to what ian said is to drop privileges and to run your whole snap as the snap_daemon user instead of running as root … but depending on the app that might require a lot of patching or a wrapper or whatnot …

System usernames

System usernames can be used by snap developers to enable them to run services and daemons as a user other than the default root. Outside of snaps, applications traditionally adopt the concept of users and groups from the host operating system to use as a security mechanism that grants access to specific system and software resources. Snap confinement prohibits a system’s users and groups from being used in this way within a snap but a snap_daemon user and group can alternatively be created wi…