<div dir="ltr">Hi,<div><br></div><div>I would think that the security concerns can be minimized, if not completely eliminated, by setting up a way to have one snap application invoke another, possibly itself. In theory, a snap itself is already vetted and running in a secure environment. So what's insecure about one snap asking the system to invoke another? Perhaps there are some constraints on that which need to be had as well. In any case, my snap might call some other snap that Ubuntu publishes (that is endowed with special privileges) that is delegated the responsibility of invoking processes outside the secure environment, such as a browser.</div><div><br></div><div>I don't know; I'm just brain-storming. Obviously I don't know enough about the snap technology to talk about it intelligently.</div><div><br></div><div>I still need to get a grip on the plugs and slots.</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Oct 20, 2016 at 1:00 AM, Mark Shuttleworth <span dir="ltr"><<a href="mailto:mark@ubuntu.com" target="_blank">mark@ubuntu.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br>
This is an active discussion for us at the moment, I think we will have<br>
a solution for you soon.<br>
<span class="HOEnZb"><font color="#888888"><br>
Mark<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
--<br>
Snapcraft mailing list<br>
<a href="mailto:Snapcraft@lists.snapcraft.io">Snapcraft@lists.snapcraft.io</a><br>
Modify settings or unsubscribe at: <a href="https://lists.ubuntu.com/mailman/listinfo/snapcraft" rel="noreferrer" target="_blank">https://lists.ubuntu.com/<wbr>mailman/listinfo/snapcraft</a><br>
</div></div></blockquote></div><br></div>