Comment 0 for bug 1887204
Revision history for this message
| Merlijn Sebrechts (merlijn-sebrechts) wrote | #0 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
1b1ed1a
(Get the code!)
Snap does not clearly communicate to users about partial strict confinement. It should do so at multiple places:
* Installing a classic confined app results in an error message in the CLI and a warning in the Snap Store. Installing a strictly confined app on a distro which has partial support for this has similar security and privacy issues, but the user is not notified about this.
* The documentation about the benefits of confinement does not talk about partial strict confinement and there is not list about which distro's support strict and partial confinement.
This leads to dangerous situations where users think an app is restricted, but it isn't. WPS office is a common example for this. The snap store has multiple versions of WPS office with network access disabled because users might be worried about sensitive documents leaking to the internet.
source: https:/