Request to publish wazuh-indexer snap with `system-files` plug

store-requests
1

Hi!

I’m requesting approval to publish the wazuh-indexer snap, an opensearch-snap fork packaging an opensearch snap. As such, the requirements in terms of privileged interfaces are the same.

Thanks in advance

2

For reviewers, this is the system-files plug that the snap declares:

  sys-fs-cgroup-service:
    interface: system-files
    read:
    - /sys/fs/cgroup/system.slice/snap.wazuh-indexer.daemon.service
1 Like
3

wazuh-indexer is a fork from opensearch snap. As such, it is expected to require the same permissions.

+1 from me for granting wazuh-indexer read access to /sys/fs/cgroup/system.slice/snap.wazuh-indexer.daemon.service via system-files interface for the same reasons as for opensearch

4

+1 from me as well for the same reasoning above

5

+1 from me too for adding system-files following the logic in opensearch

6

+3 for, 0 against granting auto-connection to the requesting system-files interface. The publisher is vetted and the request fast-tracked. This is now live.