I think I need classic confinement to make https://snapcraft.io/ike-qt-lts work
It’s fine when installed in --devmode with strict confinement , but when installed from the store (with full confinement) :
openat(AT_FDCWD, "/dev/urandom", O_RDONLY|O_NOCTTY|O_NONBLOCK) = 13
fstat(13, {st_mode=S_IFCHR|0666, st_rdev=makedev(0x1, 0x9), ...}) = 0
poll([{fd=13, events=POLLIN}], 1, 10) = 1 ([{fd=13, revents=POLLIN}])
read(13, "\275EBo\301Y\2333\10&\334\221\315\345\\\254\342\16\271\221\230W\303\371\272\3363\300_yS\26", 32) = 32
close(13) = 0
getuid() = 0
sendto(12, "\0", 1, 0, NULL, 0) = 1
sendto(10, "\0", 1, 0, NULL, 0) = 1
getuid() = 0
rt_sigaction(SIGINT, {sa_handler=0x559de504bc60, sa_mask=[INT], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7f49aed55f10}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGTERM, {sa_handler=0x559de504bc60, sa_mask=[TERM], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7f49aed55f10}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
rt_sigaction(SIGPIPE, {sa_handler=SIG_IGN, sa_mask=[PIPE], sa_flags=SA_RESTORER|SA_RESTART, sa_restorer=0x7f49aed55f10}, {sa_handler=SIG_DFL, sa_mask=[], sa_flags=0}, 8) = 0
unlink("/var/run/ikedi") = -1 ENOENT (No such file or directory)
socket(AF_UNIX, SOCK_STREAM, 0) = 13
bind(13, {sa_family=AF_UNIX, sun_path="/var/run/ikedi"}, 16) = -1 EACCES (Permission denied)
fstat(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(0x88, 0x1), ...}) = 0
write(1, "Another instance of iked was det"..., 38Another instance of iked was detected