Snap Install Tio - Using Classic Confinement

[bhass1]

dev1@dev1-desktop:~$ snap install tio
error: This revision of snap "tio" was published using classic confinement and
       thus may perform arbitrary system changes outside of the security
       sandbox that snaps are usually confined to, which may put your system at
       risk.

       If you understand and want to proceed repeat the command including
       --classic.

Is there any work being done to have the tio snap use "strict" confinement instead of "classic," and then use defined snap interfaces ?

Are there technical limitations?

[lundmar]

Last time I checked up on the snapcraft framework it was required to specify exactly which serial device to allow connection to. This is of course unacceptable for a tool like tio which needs access to any serial port.

[bhass1]

Yeah, agreed that is unacceptable to specify exactly which serial device to allow connection to.

I didn't look too deeply into this yet, but I think it could be considered an enhancement of tio to get rid of this error by adhering to "strict" confinement rules.

Could also be helpful for the time being to have a note about this in the README under "4.2 Installation using snap (Linux)."

[lundmar]

Pull requests are welcome ;)

[bhass1]

Yes, of course :)

I'm trying not to make commitments that I won't follow through with, but at the same time provide useful input. I'll see what I can do tomorrow ;)