Hi @emitorino, I think that nsntrace fits into the class of utilities such as compilers/IDE’s, similar to my application etrace which was granted classic confinement usage, as per Jamie’s logic:
most notably that the snap can’t reasonably do its analysis while running under a strict mode runtime (needs access to host files).
As such, I think nsntrace should be granted classic confinement