After speaking with snapd folks, it was determined that these udev rules should not be triggered on desktop or server (and in fact, should be limited to removable media). The proper solution here is to improve the snapd auto-import udev rules.
Given that, we do not need to make any changes to systemd-udevd's syscall filtering.
After speaking with snapd folks, it was determined that these udev rules should not be triggered on desktop or server (and in fact, should be limited to removable media). The proper solution here is to improve the snapd auto-import udev rules.
Given that, we do not need to make any changes to systemd-udevd's syscall filtering.