Hi, thanks for raising this,
Reading the dm-crypt interface, I see the devices allowed to access through this one is:
/dev/dm-[0-9]* rwk,
I think you could try also connecting your snap to the block_devices interface which allows access to
# Access to raw devices, not individual partitions /dev/hd[a-t] rwk, # IDE, MFM, RLL /dev/sd{,[a-h]}[a-z] rwk, # SCSI /dev/sdi[a-v] rwk, # SCSI continued /dev/i2o/hd{,[a-c]}[a-z] rwk, # I2O hard disk /dev/i2o/hdd[a-x] rwk, # I2O hard disk continued /dev/mmcblk[0-9]{,[0-9],[0-9][0-9]} rwk, # MMC (up to 1000 devices) /dev/vd[a-z] rwk, # virtio /dev/loop[0-9]{,[0-9],[0-9][0-9]} rwk, # loopback (up to 1000 devices) /dev/loop-control rw, # loopback control
Hi, thanks for raising this,
Reading the dm-crypt interface, I see the devices allowed to access through this one is:
/dev/dm-[0-9]* rwk,
I think you could try also connecting your snap to the block_devices interface which allows access to
# Access to raw devices, not individual partitions ,[a-h]} [a-z] rwk, # SCSI hd{,[a- c]}[a-z] rwk, # I2O hard disk 0-9]{,[ 0-9],[0- 9][0-9] } rwk, # MMC (up to 1000 devices) 0-9]{,[ 0-9],[0- 9][0-9] } rwk, # loopback (up to 1000 devices)
/dev/hd[a-t] rwk, # IDE, MFM, RLL
/dev/sd{
/dev/sdi[a-v] rwk, # SCSI continued
/dev/i2o/
/dev/i2o/hdd[a-x] rwk, # I2O hard disk continued
/dev/mmcblk[
/dev/vd[a-z] rwk, # virtio
/dev/loop[
/dev/loop-control rw, # loopback control