El 27/12/16 a las 14:18, Alberto Donato escribió:
On Thu, Dec 22, 2016 at 11:14 PM, Sergio Schvezov <[email protected] <mailto:[email protected]>> wrote:



    El 19 dic. 2016 11:11 AM, "Alberto Donato"
    <[email protected]
    <mailto:[email protected]>> escribió:

        Hi,

        I'm trying to create a snap for sshuttle, the ssh-based VPN app.
        One of its components (the firewall manager) needs to either
        be run as root, or use su/sudo to be able to configure
        firewall rules.

        The app uses an "if os.getuid() != 0" to check whether it can run.

        Is there any way to get it to work inside a snap?


    Doesn't putting sudo in front of your command do the trick?


Well that might work, but it would run all sshuttle components as root, while the application is designed to run just the firewall part as root.
I'd like to preserve this behavior.
My question, in general, is whether it's possible to set up sudo within a snap confinement so that certain commands can be run as root.

`classic` confinement can give you this. Other mechanisms might be tricky: on a classic the sudoers rules checked would be that of the core and not the one on your classic system whilst on a pure snap system (Ubuntu Core), iirc, you cannot modify the sudoers file.

-- 
Snapcraft mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/snapcraft

Reply via email to