Request classic confinement for "lnxagent"

Hi there,

Requests classic confinement of Genians NAC Linux agent installer “lnxagent”.

Genians has the title of No. 1 in NAC in Korea, and our products are currently being used in many countries including the United States.(https://www.genians.com/)

Software called a Linux agent is software that is installed on the user’s terminal and works on the Policy Server.

Supported OSes are Windows, Mac, and Linux, each of which is currently published on the App Store. Currently, several companies in Korea are using Ubuntu, and the Linux agent has decided to publish it as a snap.

However, there is a point that it is difficult to install with strict confinement, so we request classic confinement.

  • action structure

→ When running the software, the first time the user enters the IP/FQDN of the policy server, and then downloads the Linux Agent installer from the policy server.

  • Why you need Classic Confinement?

→ “lnxagent” is software for installing Linux Agent, as mentioned above. Enter the IP of the Policy Server during the installation process, and Classic Confinement is required to install the package received from the Policy Server. It also requires access to system files to write logs about the installation.

Currently, “confinement” in “lnxagent” is set to “strict”

@alexmurray , May I request a review?

This request is in our internal queue and will be attended to when a @reviewer has the bandwidth - thank-you for your patience.

hey @genians,

Apologize for the delay on processing this request.

Historically, “installer snaps” has not been allowed. So can you please elaborate a bit the technical details behind the installation of the package received from the policy server?

Also, system files can be accessible by some interfaces like system-files (or others depending on the log files location).

@genians - ping, can you please provide the requested information?

@genians,

Ping, this request cannot proceed without the requested information.

@genians,

Since we’ve not heard back from you, we are removing this request from our review queue. When you have more time to respond, simply do so here and we can add the request back to the queue. Thanks!