Comment 77 for bug 1643706

Revision history for this message
Andrew Aitchison (werdnakendal) wrote :

Antti> Why cannot there be e.g. "snap add-accessible-path" command?

If I understand correctly, each accessible path must exist as a mount point *inside the snap*,
which means the list must be known at build time.

If run as root, a "snap add-accessible-path" command could rebuild the snap; it may also be possible to make the snap reread the list from a suitable file at run time and reconfigure things. I am not sure that either of these actions would maintain the security of the snap to the satisfaction of the snap team.