Comment 72 for bug 1620771

Sergey, it's probably better to ask in https://forum.snapcraft.io/ -- that will find a much larger audience than this bug report.

It's been ages since I've seen eCryptfs but my recollection is that all AppArmor policies for processes using eCryptfs data required *very* broad permissions, due to the encrypted names.

You might have some success with replacing your symlink with a bindmount instead, but I'm not optimistic that will be enough.

Thanks