Man-pages in snaps

Jamie Strandboge jamie at canonical.com
Wed Jun 8 20:39:26 UTC 2016


On Thu, 2016-06-09 at 05:29 +0900, Mark Shuttleworth wrote:
> On 09/06/16 04:51, Jamie Strandboge wrote:
> > 
> > Once man is in the os snap, this would be comfortable for users indeed.
> > 
> > I do think it worth noting that this would allow untrusted input (the man
> > page)
> > to be fed into an unconfined process ('/usr/bin/man' from the user's shell)
> Why not require "snap install man" ?
> 

This is indeed possible and better since man then runs under confinement. We
take Gustavo's idea of creating a man page directory that snapd puts the man
pages in, then we add a 'man-pages' interface to allow reading that directory.
The 'man' snap 'plugs: [ man-pages ]'.

What is also nice about this approach is that we can have man-page-only snaps
such as those that were stripped out of the os snap, manpages, manpages-dev,
translated man pages, man pages for snappy itself, etc.

-- 
Jamie Strandboge             | http://www.canonical.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/snapcraft/attachments/20160608/82c88c15/attachment.sig>


More information about the Snapcraft mailing list