should not remove suid/guid from binaries when confinement is devmode
Metadata
Current evaluation
Snapcraft strips SUID/SGID bits during pack, breaking oxide chrome-sandbox in devmode. Request to preserve bits when confinement is devmode. Open 10 years, no labels, no comments, never triaged.
Suggested action: needs triage
Reason: The issue has no labels, no maintainer comments, and no assignee after 10 years, indicating it was never triaged. The underlying behavior (snapcraft stripping SUID/SGID bits) is still a real snapcraft behavior, and the feature request to conditionally preserve bits in devmode remains potentially valid, so it needs assessment before any close decision.
Impact:
35
Quick Win:
19.25
Staleness:
92
Complexity:
45
Confidence:
55
Support Request:
25
Issue body
Use case: I’m building a snap for webbrowser-app, which embeds oxide (https://launchpad.net/oxide). When snapcraft creates the package, I’m seeing this:
Removing suid/guid from /build/webbrowser-app/snap/parts/webbrowser-app/install/usr/lib/x86_64-linux-gnu/oxide-qt/chrome-sandbox
This effectively prevents oxide from functioning correctly:
[0705/173002:FATAL:setuid_sandbox_host.cc(162)] The SUID sandbox helper binary was found, but is not configured correctly. Rather than run without sandboxing I'm aborting now. You need to make sure that /snap/webbrowser-app/x1/usr/lib/x86_64-linux-gnu/oxide-qt/chrome-sandbox is owned by root and has mode 4755.
While the issue will need to be addressed properly, I think that when building the snap in devmode, snapcraft shouldn’t remove the suid/guid from the binary, as it would be useful for testing the resulting package unconfined.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.8-27b |
Impact:
35
Quick Win:
19.25
Staleness:
92
Complexity:
45
Confidence:
55
Support Request:
25
|
needs triage | Snapcraft strips SUID/SGID bits during pack, breaking oxide chrome-sandbox in devmode. Request to preserve bits when confinement is devmode. Open 10 years, no labels, no comments, never triaged. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
98
Complexity:
15
Confidence:
70
Support Request:
10
|
needs triage | Request to preserve SUID/GUID bits during snapcraft builds in devmode for unconfined testing. Unlabelled, zero comments, and inactive for over nine years. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
95
Complexity:
65
Confidence:
90
Support Request:
20
|
close stale | Unaddressed request to preserve SUID/GUID bits during snapcraft builds in devmode for unconfined testing. Issue remains open with zero maintainer interaction after over 10 years. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
95
Complexity:
20
Confidence:
90
Support Request:
10
|
close stale | Feature request to preserve SUID/GUID bits during snapcraft builds in devmode to support testing unconfined packages. Issue is over 9 years old with no maintainer engagement or comments. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
98
Complexity:
35
Confidence:
90
Support Request:
15
|
close stale | Snapcraft removes SUID/GUID bits from binaries, breaking apps like oxide-qt. Suggests preserving these bits during devmode builds for unconfined testing. Open, inactive, no comments or labels. |
Update history
No update history recorded yet.
Related issues
No related issues found above the similarity threshold.