Permissions
See the snapcraft.yaml file to audit which services are using which permissions by looking at the "plugs" for each.
To check which of those permissions have been granted to an installed instance of Antennas, run snap connections antennas.
| Permission | Uses | Automatic |
|---|---|---|
| network | Enables network access | Yes |
| network-bind | Allows services to listen on a port. dnsmasq listens on port 67 and dnscrypt listens on port 53 | Yes |
| network-control | Enables the configuration of networking and network namespaces | Yes* |
| firewall-control | Can make changes to the nftables firewall rules. Required for using device to forward packets correctly as a router. | Yes* |
- Normally these permissions do not automatically connect, but Antennas has been given special permission to.
If the automatic connection of network-control and firewall-control were ever to be revoked, you can manually connect them with these commands:
sudo snap connect antennas:firewall-control
sudo snap connect antennas:network-control