# Pastebin 8j0nZM46
spineau: <jdstrand> 
allowing them to use sudo to break out of confinement as root doesn't really work

11:26 AM C<cwayne> Chris Wayne 
well its not necessarily trying to break out of confinement, some confined things need root (like bluez-tests)

11:27 AM J<jdstrand> 
that is different
11:27 AM snap commands should be able to talk to their daemons
11:28 AM we shouldn't block that (but that is largely up to the snap daemon to set up things in a way for that to happen

11:28 AM S<sborovkov> Sergey Borovkov 
niemeyer: that plymouth patch works, thanks!

11:28 AM J<jdstrand> 
)
11:28 AM but the example in the bug is checkbox. checkbox wants to run things outside of itself
11:29 AM it really wants to have an unconfined interface
11:29 AM I suppose an argument could be made that devmode snaps should be able to use sudo. but the mailing doesn't say that
11:30 AM mailing list*
11:30 AM and reading the bug more closely-- it should work
11:31 AM the problem in the bug is "Any call to sudo fails with the error "pkexec must be setuid root""
11:31 AM why is sudo calling pkexec?
11:31 AM the problem here is that pkexec is not installed in the core snap