I didn't want to give access to some sensitive directories when executing proprietary programs from snap. This is what I've done so far:
- Created a new user and limit read/write access to main
/home
directory and some other directories - Added X access to other user for GUI applications, via
xhost +si:localuser:[user 2]
su
into the other user and run the command
Unfortunately for some programs write access is required for /run/user/1000
, which is owned by the main user. For example running skype
from snap.
What's the problem here? Why doesn't the new user just create a new run/user
directory? I'm not too familiar with these concepts so a detailed explanation/fix would be very appreciated.
su
does perform a login.su
orsu -
? Checkenv | grep XDG
in the two cases, compare to what it prints for your normal user.