← Back to issue list

~/snap directory should be o0700

View original Launchpad issue

Metadata

Project
snapcraft (launchpad)
Number
#1910298
Type
issue
State
closed
Author
~jdstrand
Labels
—
Created
Updated
Closed

Current evaluation

Closed as stale without a final documented fix; snapcraft-desktop-helpers PR #218 was merged, while broader snapd remediation remained in PRs #9897 and #10992.

Resolution: closed stale

Reason: The thread confirms that ubuntu/snapcraft-desktop-helpers#218 fixed directory creation in the helpers, but no final Snapcraft resolution established that the broader ~/snap permission problem was fixed. The item was later closed after prolonged inactivity, with snapcore/snapd#9897 and #10992 cited as follow-up work.

Evaluated by: mr-cal-bot

No scores available.

Issue body

IMO, .cache, .config (and probably .local) directories created under ~/snap/ should be o0700 as they are in ~/ ATM, that doesn't appear to be the case, e.g.   https://pastebin.canonical.com/p/XhbnKcCFxk/ https://pastebin.canonical.com/p/4DYYqVZkBQ/

Evaluation history

Date Model Scores Action Summary
stealth/space-bunny-alpha — closed stale Closed as stale without a final documented fix; snapcraft-desktop-helpers PR #218 was merged, while broader snapd remediation remained in PRs #9897 and #10992.
stealth/space-bunny-alpha — closed stale Closed without a documented final fix after prolonged inactivity. A desktop-helpers fix was merged in #218, while proposed broader snapd remediation remained linked through #9897 and #10992.
stealth/space-bunny-alpha — closed stale Launchpad #1910298 was closed without a documented fix; the request for 0700 permissions on ~/snap/.cache, .config, and .local ended after prolonged inactivity.
qwen/qwen3.6-35b-a3b — — Abandoned without resolution. The report requested o0700 permissions for .cache, .config, and .local directories under ~/snap/ to match ~/ permissions, but received no comments or follow-up action.
qwen/qwen3.6-35b-a3b — — Closed without comments or resolution, indicating the request to enforce o0700 permissions on ~/snap subdirectories was abandoned. No fix or merge occurred.

Update history

Date Change
created

Related work

  • Related To: snapd#9897 (confidence 95%)

    Proposed snapd user-session-agent remediation for enforcing permissions.

  • Related To: snapd#10992 (confidence 95%)

    Follow-up snapd work intended to cover permission remediation from snap run.

  • Likely Fixed By: snapcraft-desktop-helpers#218 (confidence 90%)

    Maintainer reported this desktop-helpers fix as merged, addressing the affected directory-creation helper.

Related issues

Issue Project State Summary Similarity
#1659085 snapcraft needs to migrate to a snap directory snapcraft (launchpad) closed Closed as fixed by sergiusens after snapcraft merged snap-directory support: PR #1073 (snap/snapcraft.yaml, commit 78f3d4fe3), PR #1082 (new plugin directory, eb884b074) and PR #1083 (GUI support, 8332c5740); parts/stage/prime item split to a separate bug.
72%
#539 Part dependency names not validated craft-parts closed Closed as stale without a documented fix; the linked Launchpad snapcraft bug #2033882 was also abandoned.
72%
#1650686 Some symlinks not properly fixed up snapcraft (launchpad) closed Closed as stale in September 2017 after the reporter could not reproduce the problem; no Snapcraft fix was identified.
70%