Hi there,

I am also affected by this issue. I am a Debian testing (currently
bookworm) user and am using snaps for front end apps so as to have updates
for them immediately available, and was under the impression the
confinement was working until I noticed a problem. For example using
firefox-esr via the snap version I had expected sandboxing and confinement
to be on par with the sister project Ubuntu.

However checking:
snap debug sandbox-features
Shows output:
confinement-options:  classic devmode

The expected result would be confinement-options:  classic devmode *strict*

Also checking
*:*
snap debug confinement
Shows output:
partial

The expected result would be *strict*

As a result it appears to me that a security issue is present. I realise
that this is an older bug report but there has not been any movement on it
for some time. Is there anything that can be done to try to progress this
issue towards a resolution while not making anyone unhappy, so I dont want
to upset anyone. Please let me know who I can ask kindly for help on this
if possible? I love everyone and Debian and just want features downstream
to make their way back up so that Debian stays strong and the number 1
choice for users needing a free and open source solution. Thank you in
advance.

Kind regards
Peter

Reply via email to