Hi,
I’m looking into merging [PM-2539] Allow cli snap to access home and removable-media by jmlrt · Pull Request #5577 · bitwarden/clients · GitHub such that Bitwarden users can create vault exports to removeable media (as encrypted backups - a frequent use-case). To enable users to do this, auto-connection of the removable-media
plug is needed for BW (Install bw on Linux | Snap Store ) , as there is no appropriate portal to grant access to a specific filepath dynamically.
Considerations from my side after reading what is typically granted this permission
major browsers and email clients (rationale: the software is designed with security and user privacy in mind)
While not a browser, nor an email client, Bitwarden is certainly designed with user privacy and security in mind.
For the secondary considerations:
the application itself is a mature, well-known application
the snap’s (vetted) publisher is a mature, well-known entity
the snap’s (vetted) publisher is the upstream of the software
I believe all of these apply.
Thank you!
This seems a legitimate use-case to me, thus +1 from me to grant auto-connect of the interface removable-media
to bitwarden-cli snap
thanks
cav
October 24, 2024, 11:13pm
3
Pending vetting, +1 from me given that encrypted backups are a frequent use case for the snap. I also think that the use of removable-media
should be mentioned in the snap description so that user’s know that their removable media can be accessed via the snap
cav
November 14, 2024, 2:14am
4
+2 votes for, 0 votes against, granting auto-connect of interface removable-media
. I will begin publisher vetting.
@quexten - Could you please provide your github account associated with the upstream project.
quexten
November 14, 2024, 11:13am
5
My github account user name is same as here - quexten - contributions here: Pull requests · bitwarden/clients · GitHub and I’m part of the bitwarden github org. Also, here is the PR that adds the removable-media plug to the snap manifest [PM-2539] Allow cli snap to access home and removable-media by jmlrt · Pull Request #5577 · bitwarden/clients · GitHub - it is a community PR that I reviewed.
Let me know if there is anything else you need.
Beware I’m not part of the build-release-engineering team that directly manage the snap releases. I can ping them to also reach out here if necessary though.
cav
November 19, 2024, 11:46pm
6
The publisher is now vetted, auto-connect of interface removable-media
is now live.
1 Like