2
/dev/mapper/control rw,
4
# allow use of cryptsetup from core snap
5
/{,usr/}sbin/cryptsetup ixr,
6
# Mount points could be in /run/media/<user>/* or /media/<user>/*
7
/run/systemd/seats/* r,
8
/{,run/}media/{,**} rw,
9
mount options=(ro,nosuid,nodev) /dev/dm-[0-9]* -> /{,run/}media/**,
10
mount options=(rw,nosuid,nodev) /dev/dm-[0-9]* -> /{,run/}media/**,
12
# exec mount/umount to do the actual operations
13
/{,usr/}bin/mount ixr,
14
/{,usr/}bin/umount ixr,
16
# mount/umount (via libmount) track some mount info in these files
17
/run/mount/utab* wrlk,