Master App Permissions in Ubuntu: A Step-by-Step Guide

Introduction

If you haven't explored Ubuntu's latest app permission controls recently, you're in for a pleasant surprise. Canonical has revamped the security prompt system for Snap packages, making it smarter and more user-friendly. Inspired by the permission models found on Android and iOS, this update lets you grant or deny system and hardware access at the exact moment an app needs it—rather than after the fact. This approach puts you firmly in the driver's seat, just as you'd expect from a modern operating system. In this guide, you'll learn how to take full advantage of these improved prompts, from initial setup to advanced permission management.

(Previously covered on OMG! Ubuntu, this feature now aims to “empower users” by offering runtime permission requests.)

What You Need

• Ubuntu 24.10 or later – The latest release includes the updated Snap permission prompting system. Older versions may lack full functionality.
• Internet connection – To download and update Snap packages.
• A Snap app that requests permissions – For example, a camera app, microphone tool, or file manager. We'll use a sample video chat app for demonstration.
• Basic familiarity with the terminal – Optional but helpful for checking Snap version info.

Step-by-Step Instructions

Step 1: Update Your System to the Latest Ubuntu Release

The improved permission prompts are part of the latest Snap daemon. Ensure you're running the most recent version of Ubuntu (24.10 or newer) to benefit from these changes.

1. Open Software & Updates from the application menu.
2. Go to the Updates tab and check for new system updates.
3. Alternatively, open a terminal and run: sudo apt update && sudo apt upgrade
4. Reboot your system if prompted.

After rebooting, verify your Snap version with snap --version and ensure the core Snap is up-to-date: sudo snap refresh core.

Step 2: Install a Snap Application That Uses Sensitive Permissions

To see permission prompts in action, install a Snap that requires access to hardware like the camera, microphone, or location. For this guide, we'll install the Cheese webcam app.

1. Open Ubuntu Software (Snap Store).
2. Search for “Cheese” and click Install.
3. Or use the terminal: snap install cheese
4. Once installed, you’ll find Cheese in your application menu.

Step 3: Launch the App and Encounter the Permission Prompt

When you first run a Snap that requests system access, you’ll see a modal dialog appear—similar to the familiar Google Play or iOS prompts.

1. Click on the Cheese icon from the dock or menu.
2. Immediately, a dialog box asks: “Allow Cheese to access the camera?”
3. You’ll have three options: Allow, Deny, or Only While Using the App.

This runtime request means you decide permission at the moment it’s needed, not hours later in settings.

Step 4: Choose Your Permission Response Wisely

Your choice determines how the app behaves immediately and in future sessions.

• Allow – Grants indefinite access. The app can use the camera any time it’s running, even in the background (background activity depends on Snap confinement).
• Only While Using the App – Permits access only while the app window is active. This is the most privacy-friendly option for sensitive hardware.
• Deny – Blocks access entirely. The app will fail to capture video but won’t crash.

Tip: Start with “Only While Using” for most scenarios. You can always change later.

Step 5: Review and Modify Permissions After the Fact (Optional but Recommended)

The great part? Ubuntu lets you revisit permissions at any time. Here’s how to audit what you’ve allowed.

1. Open Settings and navigate to Privacy & Security.
2. Select Application Permissions (under Snap permissions).
3. Find Cheese in the list and click on it.
4. Toggle the camera permission between Always allow, Only while using, or Ask every time.

For a deeper look, use the terminal: snap connections cheese shows all interface connections (permissions) currently granted.

Step 6: Revoke a Permission When No Longer Needed

If you suspect an app no longer needs a sensitive permission, revoke it immediately.

1. From the same Application Permissions screen, click the app you want to manage.
2. Set the permission to Deny or Ask every time – the latter re-enables prompts the next time.
3. Alternatively, uninstall the app entirely via snap remove cheese – this removes all granted permissions.

Remember: revoking a permission may break app functionality, but it prevents misuse without your knowledge.

Tips for a Secure and Smooth Experience

• Keep Snaps Updated – The permission system is part of the Snap daemon (snapd). Run sudo snap refresh regularly to get the latest improvements from Canonical.
• Use the “Only While Using” Default – For camera, microphone, and location, this strikes the best balance between convenience and privacy.
• Audit Permissions Monthly – Even trusted apps may have more access than needed. Check your list in Settings.
• Beware of Permissions Stacking – Some Snaps request multiple interfaces at once. Deny anything that seems unnecessary for the app’s primary function.
• Test with a Toy App First – If you’re new to Snap permissions, install a harmless app like Cheese to see how prompts behave before granting to critical software.
• Report Anomalies – If you encounter a prompt that doesn’t appear, or a permission that won’t revoke, file a bug against snapd – the development team (led by Oliver Calder) is actively refining these features.

By following these steps, you’re now equipped to control app permissions in Ubuntu with confidence. The system puts you in charge—just like on your phone, but tailored for the desktop. Enjoy a more secure and transparent computing experience.