Hello everybody, Want to know how the Linux kernel enforces the traditional UNIX ‘owner’ permissions to a Snap application. Who is the owner? (The user that installs the application or the root user?) and what is the mechanism used to do that? Thanks, Ali Baghernejad

“Owner” is kind of a misleading term here, ownership of files is managed by your underlying filesystem, if you install a snap this happens as root since snapd needs to put files in places only root can write to (/var/lib/snapd … etc). If your snap contains services, these are also executed as root …

Blog
Build
Docs
Tutorials

Canonical Snapcraft

Snap Store
About
Learn
IoT
Forum

Forum

snapcraft.io

Snaps and the owner Permission

snap

ogra November 17, 2020, 7:34am 4

see:

System usernames doc

System usernames can be used by snap developers to enable them to run services and daemons as a user other than the default root. Outside of snaps, applications traditionally adopt the concept of users and groups from the host operating system to use as a security mechanism that grants access to specific system and software resources. Snap confinement prohibits a system’s users and groups from being used in this way within a snap but a snap_daemon user and group can alternatively be created wi…

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled

Legal information Privacy policy Manage your tracker settings