Classic snap analyzer

This package contains a utility for analysis of running processes belonging to snaps that use classic confinement. Classic confinement does not isolate the snap from the host (or the host from the snap) and doesn't use a mount namespace to ensure only the packaged shared libraries are used.

Because of this characteristic such snaps are prone to packaging bugs where the application only happens to work on a given machine because a critical dependency is unknowingly provided by the host.

This snap inspects the running snap application and reads the segments mapped into the process address space. Files mapped from /snap/core/ and /snap/$SNAP_NAME/ are ignored as they are exactly what correctly packaged applications should do. All other file segments are reported because they are used from the host directly and can thus break in the future.