Ubuntu’s Streamlined App Permissions: Your Questions Answered

Ubuntu's latest release introduces a major upgrade to how snap applications request permissions. Instead of managing permissions long after installation, users now see real-time prompts—similar to those on Android or iOS—when an app tries to access your camera, microphone, file system, or other hardware. This shift, detailed by Canonical’s Oliver Calder, puts you in control and makes the desktop experience more transparent and secure. Below, we answer the most common questions about this new feature.

1. What exactly has changed in Ubuntu’s app permission prompting?

Previously, snap applications required you to manually approve permissions upfront or adjust them through system settings after the fact. Now, Ubuntu prompts you at runtime — the moment an app needs access to a specific resource. This means you see a modal dialog, like “Allow <em>Acme App</em> to access your camera?” with options to deny, allow once, or allow while the app is in use. The change aims to empower users by giving them context-aware control, reducing the risk of granting unnecessary permissions and improving privacy.

2. How do the new runtime permission prompts work?

When a snap application tries to use a protected resource—such as the webcam, location services, or your home directory—Ubuntu shows a system-level dialog. You can choose to deny access permanently or for that session, allow once, or allow only while the app is running. This behavior mirrors the permission models found in Android and iOS, but tailored for a desktop environment. The prompts are built into the snap confinement system, ensuring that no unapproved access occurs without your explicit consent. Over time, the system learns your preferences and reduces disruptions for trusted applications.

3. Why did Canonical decide to bring mobile-style prompts to the desktop?

Canonical recognized that desktop users increasingly handle sensitive data and use applications that require hardware access—video conferencing, file editors, cloud syncing tools. Traditional Linux permission models often rely on broad grants during installation, which can be overly permissive or difficult to revoke. By adopting runtime prompts, Canonical aims to make security decisions more intuitive and relevant to the moment. Oliver Calder noted that this approach “empowers users” by letting them grant access exactly when needed, rather than retrospectively. It also aligns Ubuntu with modern security expectations set by mobile platforms, while still respecting the flexibility that desktop users require.

4. How does Ubuntu’s approach compare to Android or iOS?

The mechanics are very similar: a pop-up appears asking for permission with clear options. However, there are key differences. On a desktop, multiple apps may run simultaneously in overlapping windows, so prompts are designed to avoid interrupting your workflow. Ubuntu also allows you to review and revoke permissions at any time via the snap settings panel, much like you would on a phone. One unique aspect is the integration with snap confinement—if a snap hasn’t declared that permission interface, the prompt won’t appear, preventing any unapproved request. This provides an additional layer of security compared to many mobile OS implementations.

5. What kinds of permissions can users control with these prompts?

The new prompting covers a wide range of system and hardware resources, including:

• Camera and microphone – for webcam, voice recording
• Location services – GPS or network-based positioning
• File system access – to specific directories like ~/Documents
• Network control – outbound connections, firewall modifications
• Removable media – USB drives, SD cards
• Notifications – ability to show system alerts

Each permission is defined by a snap interface, and developers must declare which ones their app will request. Users see exactly what the app is asking for and can make a granular choice. This prevents apps from silently expanding their access after installation.

6. How can I manage permissions after the initial prompt?

If you ever want to change a permission decision, Ubuntu provides a central management interface. Open the Software & Updates application (or use the command line) and navigate to the snaps section. There, you view each installed snap and toggle its assigned interfaces on or off. You can also reset a particular permission so that the next time the app tries to use it, the prompt reappears. This gives you full control to revoke previously granted access at any point. For power users, the snap interfaces command lists all connections and allows scripting finer adjustments.

For more details, check Canonical’s official announcement or the first question above.