Comment 3 for bug 484786

Sounds like the ioctl to create snapshots should be confined by the profile.