Attachment 867635 Details for Bug 1211989

/sbin/apparmor_parser -pq /var/lib/snapd/apparmor/profiles/snap-update-ns.authy

profile_with_includes (text/plain), 83.13 KB, created by Michel Filipe on 2023-06-17 05:04:41 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Michel Filipe

Created: 2023-06-17 05:04:41 UTC

Size: 83.13 KB

patch

obsolete

>
># Description: Allows snap-update-ns to construct the mount namespace specific
># to a particular snap (see the name below). This specifically includes the
># precise locations of the layout elements.
>
># vim:syntax=apparmor
>
> 
>
>##included <tunables/global>
># ------------------------------------------------------------------
>#
>#    Copyright (C) 2006-2009 Novell/SUSE
>#    Copyright (C) 2010-2014 Canonical Ltd.
>#
>#    This program is free software; you can redistribute it and/or
>#    modify it under the terms of version 2 of the GNU General Public
>#    License published by the Free Software Foundation.
>#
># ------------------------------------------------------------------
>
># All the tunables definitions that should be available to every profile
># should be included here
>
> 
>
>##included <tunables/home>
># ------------------------------------------------------------------
>#
>#    Copyright (C) 2006-2009 Novell/SUSE
>#    Copyright (C) 2010 Canonical Ltd.
>#
>#    This program is free software; you can redistribute it and/or
>#    modify it under the terms of version 2 of the GNU General Public
>#    License published by the Free Software Foundation.
>#
># ------------------------------------------------------------------
>
># @{HOMEDIRS} is a space-separated list of where user home directories
># are stored, for programs that must enumerate all home directories on a
># system.
>@{HOMEDIRS}=/home/
>
>
># @{HOME} is a space-separated list of all user home directories. While
># it doesn't refer to a specific home directory (AppArmor doesn't
># enforce discretionary access controls) it can be used as if it did
># refer to a specific home directory
>@{HOME}=@{HOMEDIRS}/*/ /root/
>
>
># Also, include files in tunables/home.d for site-specific adjustments to
># @{HOMEDIRS}.
> 
>
>##included <tunables/home.d>
># ------------------------------------------------------------------
>#
>#    Copyright (C) 2010 Canonical Ltd.
>#    This program is free software; you can redistribute it and/or
>#    modify it under the terms of version 2 of the GNU General Public
>#    License published by the Free Software Foundation.
>#
># ------------------------------------------------------------------
>
># The following is a space-separated list of where additional user home
># directories are stored, each must have a trailing '/'. Directories added
># here are appended to @{HOMEDIRS}.  See tunables/home for details. Eg:
>#@{HOMEDIRS}+=/srv/nfs/home/ /mnt/home/
>
>
> 
>
>##included <tunables/multiarch>
># ------------------------------------------------------------------
>#
>#    Copyright (C) 2010 Canonical Ltd.
>#
>#    This program is free software; you can redistribute it and/or
>#    modify it under the terms of version 2 of the GNU General Public
>#    License published by the Free Software Foundation.
>#
># ------------------------------------------------------------------
>
># @{multiarch} is the set of patterns matching multi-arch library
># install prefixes.
>@{multiarch}=*-linux-gnu*
>
>
># Also, include files in tunables/multiarch.d for site and packaging
># specific adjustments to @{multiarch}.
> 
>
>##included <tunables/multiarch.d>
># ------------------------------------------------------------------
>#
>#    Copyright (C) 2011 Canonical Ltd.
>#
>#    This program is free software; you can redistribute it and/or
>#    modify it under the terms of version 2 of the GNU General Public
>#    License published by the Free Software Foundation.
>#
># ------------------------------------------------------------------
>
># The following is a space-separated list of where additional multipath
># prefixes are stored, each should not have a trailing '/'. Directories
># added here are appended to @{multiarch}. See tunables/mutliarch for details. Eg:
>#@{multiarch}+=*-freebsd* s390-hurd-zomg
>
>
> 
>
>##included <tunables/proc>
># ------------------------------------------------------------------
>#
>#    Copyright (C) 2006 Novell/SUSE
>#
>#    This program is free software; you can redistribute it and/or
>#    modify it under the terms of version 2 of the GNU General Public
>#    License published by the Free Software Foundation.
>#
># ------------------------------------------------------------------
>
># @{PROC} is the location where procfs is mounted.
>@{PROC}=/proc/
>
>
> 
>
>##included <tunables/alias>
># ------------------------------------------------------------------
>#
>#    Copyright (C) 2010 Canonical Ltd.
>#
>#    This program is free software; you can redistribute it and/or
>#    modify it under the terms of version 2 of the GNU General Public
>#    License published by the Free Software Foundation.
>#
># ------------------------------------------------------------------
>
># Alias rules can be used to rewrite paths and are done after variable
># resolution. For example, if '/usr' is on removable media:
># alias /usr/ -> /mnt/usr/,
>#
># Or if mysql databases are stored in /home:
># alias /var/lib/mysql/ -> /home/mysql/,
>
> 
>
>##included <tunables/kernelvars>
>#    Copyright (C) 2012 Canonical Ltd.
>#
>#    This program is free software; you can redistribute it and/or
>#    modify it under the terms of version 2 of the GNU General Public
>#    License published by the Free Software Foundation.
>#
># ------------------------------------------------------------------
>
># This file should contain declarations to kernel vars or variables
># that will become kernel vars at some point
>
># until kernel vars are implemented
># and until the parser supports nested groupings like
>#   @{pid}=[1-9]{[0-9]{[0-9]{[0-9]{[0-9]{[0-9],},},},},}
># use
>@{pid}={[1-9],[1-9][0-9],[1-9][0-9][0-9],[1-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9],[1-4][0-9][0-9][0-9][0-9][0-9][0-9]}
>
>
>#same pattern as @{pid} for now
>@{tid}=@{pid}
>
>
>#A pattern for pids that can appear
>@{pids}=@{pid}
>
>
># Placeholder for user id until kernel var is implemented to match
># current user of the confined application.
># Values are 0...4,294,967,295 (32-bit unsigned, 10 digits).
>@{uid}={[0-9],[1-9][0-9],[1-9][0-9][0-9],[1-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9],[1-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9],[1-4][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9][0-9]}
>
>
>#same pattern as @{uid} for now
>@{uids}=@{uid}
>
>
># until kernel var is implemented
>@{sys}=/sys/
>
>
> 
>
>##included <tunables/xdg-user-dirs>
># ------------------------------------------------------------------
>#
>#    Copyright (C) 2014 Canonical Ltd.
>#
>#    This program is free software; you can redistribute it and/or
>#    modify it under the terms of version 2 of the GNU General Public
>#    License published by the Free Software Foundation.
>#
># ------------------------------------------------------------------
>
># Define the common set of XDG user directories (usually defined in
># /etc/xdg/user-dirs.defaults)
>@{XDG_DESKTOP_DIR}="Desktop"
>
>@{XDG_DOWNLOAD_DIR}="Downloads"
>
>@{XDG_TEMPLATES_DIR}="Templates"
>
>@{XDG_PUBLICSHARE_DIR}="Public"
>
>@{XDG_DOCUMENTS_DIR}="Documents"
>
>@{XDG_MUSIC_DIR}="Music"
>
>@{XDG_PICTURES_DIR}="Pictures"
>
>@{XDG_VIDEOS_DIR}="Videos"
>
>
># Also, include files in tunables/xdg-user-dirs.d for site-specific adjustments
># to the various XDG directories
> 
>
>##included <tunables/xdg-user-dirs.d>
># ------------------------------------------------------------------
>#
>#    Copyright (C) 2014 Canonical Ltd.
>#    This program is free software; you can redistribute it and/or
>#    modify it under the terms of version 2 of the GNU General Public
>#    License published by the Free Software Foundation.
>#
># ------------------------------------------------------------------
>
># The following may be used to add additional entries such as for
># translations. See tunables/xdg-user-dirs for details. Eg:
>#@{XDG_MUSIC_DIR}+="Musique"
>
>#@{XDG_DESKTOP_DIR}+=""
>#@{XDG_DOWNLOAD_DIR}+=""
>#@{XDG_TEMPLATES_DIR}+=""
>#@{XDG_PUBLICSHARE_DIR}+=""
>#@{XDG_DOCUMENTS_DIR}+=""
>#@{XDG_MUSIC_DIR}+=""
>#@{XDG_PICTURES_DIR}+=""
>#@{XDG_VIDEOS_DIR}+=""
>
>
> 
>
>##included <tunables/share>
>@{flatpak_exports_root} = {flatpak/exports,flatpak/{app,runtime}/*/*/*/*/export}
>
>
># System-wide directories with behaviour analogous to /usr/share
># in patterns like the freedesktop.org basedir spec. These are
># owned by root or a system user, appear in XDG_DATA_DIRS, and
># are the parent directory for `applications`, `themes`,
># `dbus-1/services`, etc.
>@{system_share_dirs} = /{usr,usr/local,var/lib/@{flatpak_exports_root}}/share
>
>
># Per-user/personal directories with behaviour analogous to
># ~/.local/share in patterns like the freedesktop.org basedir spec.
># These are owned by the user running an application, appear in
># XDG_DATA_DIRS or XDG_DATA_HOME, and are the parent directory
># for the same subdirectories as @{system_share_dirs}
>@{user_share_dirs} = @{HOME}/.local{,/share/@{flatpak_exports_root}}/share
>
>
> 
>
>##included <tunables/etc>
># ------------------------------------------------------------------
>#
>#    Copyright (C) 2020 Christian Boltz
>#
>#    This program is free software; you can redistribute it and/or
>#    modify it under the terms of version 2 of the GNU General Public
>#    License published by the Free Software Foundation.
>#
># ------------------------------------------------------------------
>
># @{etc_ro} contains a space-separated list of the system configuration directories.
># Traditionally this means /etc/, but when using a read-only / filesystem and/or
># with the goal of having only user-modified config files in /etc/, directories
># like /usr/etc/ get introduced for storing the default config.
>
># @{etc_ro} contains directories with configuration files, including read-only directories.
># Do not use @{etc_ro} in rules that allow write access.
>@{etc_ro}=/etc/ /usr/etc/
>
>
># @{etc_rw} contains directories where writing to configuration files is allowed.
># @{etc_rw} should always be a subset of @{etc_ro}.
>#
># Only use @{etc_rw} if the profile allows writing to a configuration file.
># For rules that only allows read access, use @{etc_ro}.
>@{etc_rw}=/etc/
>
>
># Also, include files in tunables/etc.d/ for site-specific adjustments to
># @{etc_ro} and @{etc_rw}.
> 
>
>##failed include <tunables/etc.d>
>
>
> 
>
>##included <tunables/run>
>@{run}=/run/ /var/run/
>
>
>
>
>profile snap-update-ns.authy (attach_disconnected) {
>  # The next four rules mirror those above. We want to be able to read
>  # and map snap-update-ns into memory but it may come from a variety of places.
>  /usr/lib{,exec,64}/snapd/snap-update-ns mr,
>  /var/lib/snapd/hostfs/usr/lib{,exec,64}/snapd/snap-update-ns mr,
>  /{,var/lib/snapd/}snap/{core,snapd}/*/usr/lib/snapd/snap-update-ns mr,
>  /var/lib/snapd/hostfs/{,var/lib/snapd/}snap/core/*/usr/lib/snapd/snap-update-ns mr,
>
>  # Allow reading the dynamic linker cache.
>  /etc/ld.so.cache r,
>  # Allow reading, mapping and executing the dynamic linker.
>  /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}ld-*.so mrix,
>  # Allow reading and mapping various parts of the standard library and
>  # dynamically loaded nss modules and what not.
>  /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libc{,-[0-9]*}.so* mr,
>  /{,usr/}lib{,32,64,x32}/{,@{multiarch}/{,atomics/}}libpthread{,-[0-9]*}.so* mr,
>
>  # Common devices accesses
>  /dev/null rw,
>  /dev/full rw,
>  /dev/zero rw,
>  /dev/random r,
>  /dev/urandom r,
>
>  # golang runtime variables
>  /sys/kernel/mm/transparent_hugepage/hpage_pmd_size r,
>  # glibc 2.27+ may poke this file to find out the number of CPUs
>  # available in the system when creating a new arena for malloc, see
>  # Golang issue 25628
>  /sys/devices/system/cpu/online r,
>
>  # Allow reading the command line (snap-update-ns uses it in pre-Go bootstrap code).
>  @{PROC}/@{pid}/cmdline r,
>
>  # Allow reading file descriptor paths
>  @{PROC}/@{pid}/fd/* r,
>  # Allow reading /proc/version. For release.go WSL detection.
>  @{PROC}/version r,
>
>  # Allow reading own cgroups
>  @{PROC}/@{pid}/cgroup r,
>
>  # Allow reading somaxconn, required in newer distro releases
>  @{PROC}/sys/net/core/somaxconn r,
>  # but silence noisy denial of inet/inet6
>  deny network inet,
>  deny network inet6,
>
>  # Allow reading the os-release file (possibly a symlink to /usr/lib).
>  /{etc/,usr/lib/}os-release r,
>
>  # Allow creating/grabbing global and per-snap lock files.
>  /run/snapd/lock/authy.lock rwk,
>  /run/snapd/lock/.lock rwk,
>
>  # Allow reading stored mount namespaces,
>  /run/snapd/ns/ r,
>  /run/snapd/ns/authy.mnt r,
>
>  # Allow reading per-snap desired mount profiles. Those are written by
>  # snapd and represent the desired layout and content connections.
>  /var/lib/snapd/mount/snap.authy.fstab r,
>  /var/lib/snapd/mount/snap.authy.user-fstab r,
>
>  # Allow reading and writing actual per-snap mount profiles. Note that
>  # the wildcard in the rule to allow an atomic write + rename strategy.
>  # Those files are written by snap-update-ns and represent the actual
>  # mount profile at a given moment.
>  /run/snapd/ns/snap.authy.fstab{,.*} rw,
>
>  # NOTE: at this stage the /snap directory is stable as we have called
>  # pivot_root already.
>
>  # Needed to perform mount/unmounts.
>  capability sys_admin,
>  # Needed for mimic construction.
>  capability chown,
>  # Needed for dropping to calling user when processing per-user mounts
>  capability setuid,
>  capability setgid,
>  # Allow snap-update-ns to override file ownership and permission checks.
>  # This is required because writable mimics now preserve the permissions
>  # of the original and hence we may be asked to create a directory when the
>  # parent is a tmpfs without DAC write access.
>  capability dac_override,
>
>  # Allow freezing and thawing the per-snap cgroup freezers
>  # v1 hierarchy where we know the group name of all processes of
>  # a given snap upfront
>  /sys/fs/cgroup/freezer/snap.authy/freezer.state rw,
>  # v2 hierarchy, where we need to walk the tree to looking for the tracking
>  # groups and act on each one
>  /sys/fs/cgroup/ r,
>  /sys/fs/cgroup/** r,
>  /sys/fs/cgroup/**/snap.authy.*.scope/cgroup.freeze rw,
>  /sys/fs/cgroup/**/snap.authy.*.service/cgroup.freeze rw,
>
>  # Allow the content interface to bind fonts from the host filesystem
>  mount options=(ro bind) /var/lib/snapd/hostfs/usr/share/fonts/ -> /snap/authy/*/**,
>  mount options=(rw private) -> /snap/authy/*/**,
>  umount /snap/authy/*/**,
>
>  # set up user mount namespace
>  mount options=(rslave) -> /,
>
>  # Allow traversing from the root directory and several well-known places.
>  # Specific directory permissions are added by snippets below.
>  / r,
>  /etc/ r,
>  /snap/ r,
>  /tmp/ r,
>  /usr/ r,
>  /var/ r,
>  /var/snap/ r,
>
>  # Allow reading timezone data.
>  /usr/share/zoneinfo/** r,
>
>  # Don't allow anyone to touch /snap/bin
>  audit deny mount /snap/bin/** -> /**,
>  audit deny mount /** -> /snap/bin/**,
>
>  # Don't allow bind mounts to /media which has special
>  # sharing and propagates mount events outside of the snap namespace.
>  audit deny mount -> /media,
>
>  # Allow receiving signals from unconfined (eg, systemd)
>  signal (receive) peer=unconfined,
>  # Allow sending and receiving signals from ourselves.
>  signal peer=@{profile_name},
>
>  # Commonly needed permissions for writable mimics.
>  /tmp/ r,
>  /tmp/.snap/{,**} rw,
>
>  # snapd logger.go checks /proc/cmdline
>  @{PROC}/cmdline r,
>
>
>		/{,var/lib/snapd/hostfs/}tmp/.X11-unix/ rw,
>		mount options=(rw, bind) /var/lib/snapd/hostfs/tmp/.X11-unix/ -> /tmp/.X11-unix/,
>		mount options=(ro, remount, bind) -> /tmp/.X11-unix/,
>		mount options=(rslave) -> /tmp/.X11-unix/,
>		umount /tmp/.X11-unix/,
>		
>  # Mount the document portal
>
>  mount options=(bind) /run/user/[0-9]*/doc/by-app/snap.authy/ -> /run/user/[0-9]*/doc/,
>
>  umount /run/user/[0-9]*/doc/,
>
>
>  # Read-only access to /usr/share/fonts
>
>  mount options=(bind) /var/lib/snapd/hostfs/usr/share/fonts/ -> /usr/share/fonts/,
>
>  remount options=(bind, ro) /usr/share/fonts/,
>
>  umount /usr/share/fonts/,
>
>
>  # Read-only access to /usr/local/share/fonts
>
>  mount options=(bind) /var/lib/snapd/hostfs/usr/local/share/fonts/ -> /usr/local/share/fonts/,
>
>  remount options=(bind, ro) /usr/local/share/fonts/,
>
>  umount /usr/local/share/fonts/,
>
>
>  # Read-only access to /var/cache/fontconfig
>
>  mount options=(bind) /var/lib/snapd/hostfs/var/cache/fontconfig/ -> /var/cache/fontconfig/,
>
>  remount options=(bind, ro) /var/cache/fontconfig/,
>
>  umount /var/cache/fontconfig/,
>
>
>  # Read-only content sharing authy:sound-themes -> gtk-common-themes:sound-themes (r#0)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/sounds/Yaru/" -> "/snap/authy/19/data-dir/sounds/Yaru{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/sounds/Yaru{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/sounds/Yaru{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/sounds/Yaru{,-[0-9]*}/",
>
>  # Writable mimic /snap/gtk-common-themes/1535/share/sounds
>
>  # .. permissions for traversing the prefix that is assumed to exist
>
>  # .. variant with mimic at /
>
>  # Allow reading the mimic directory, it must exist in the first place.
>
>  "/" r,
>
>  # Allow setting the read-only directory aside via a bind mount.
>
>  "/tmp/.snap/" rw,
>
>  mount options=(rbind, rw) "/" -> "/tmp/.snap/",
>
>  # Allow mounting tmpfs over the read-only directory.
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/",
>
>  # Allow creating empty files and directories for bind mounting things
>  # to reconstruct the now-writable parent directory.
>
>  "/tmp/.snap/*/" rw,
>
>  "/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/*/" -> "/*/",
>
>  "/tmp/.snap/*" rw,
>
>  "/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/*" -> "/*",
>
>  # Allow unmounting the auxiliary directory.
>  # TODO: use fstype=tmpfs here for more strictness (LP: #1613403)
>
>  mount options=(rprivate) -> "/tmp/.snap/",
>
>  umount "/tmp/.snap/",
>
>  # Allow unmounting the destination directory as well as anything
>  # inside.  This lets us perform the undo plan in case the writable
>  # mimic fails.
>
>  mount options=(rprivate) -> "/",
>
>  mount options=(rprivate) -> "/*",
>
>  mount options=(rprivate) -> "/*/",
>
>  umount "/",
>
>  umount "/*",
>
>  umount "/*/",
>
>  # .. variant with mimic at /snap/
>
>  "/snap/" r,
>
>  "/tmp/.snap/snap/" rw,
>
>  mount options=(rbind, rw) "/snap/" -> "/tmp/.snap/snap/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/",
>
>  "/tmp/.snap/snap/*/" rw,
>
>  "/snap/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/*/" -> "/snap/*/",
>
>  "/tmp/.snap/snap/*" rw,
>
>  "/snap/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/*" -> "/snap/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/",
>
>  umount "/tmp/.snap/snap/",
>
>  mount options=(rprivate) -> "/snap/",
>
>  mount options=(rprivate) -> "/snap/*",
>
>  mount options=(rprivate) -> "/snap/*/",
>
>  umount "/snap/",
>
>  umount "/snap/*",
>
>  umount "/snap/*/",
>
>  # .. variant with mimic at /snap/gtk-common-themes/
>
>  "/snap/gtk-common-themes/" r,
>
>  "/tmp/.snap/snap/gtk-common-themes/" rw,
>
>  mount options=(rbind, rw) "/snap/gtk-common-themes/" -> "/tmp/.snap/snap/gtk-common-themes/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/gtk-common-themes/",
>
>  "/tmp/.snap/snap/gtk-common-themes/*/" rw,
>
>  "/snap/gtk-common-themes/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/gtk-common-themes/*/" -> "/snap/gtk-common-themes/*/",
>
>  "/tmp/.snap/snap/gtk-common-themes/*" rw,
>
>  "/snap/gtk-common-themes/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/gtk-common-themes/*" -> "/snap/gtk-common-themes/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/gtk-common-themes/",
>
>  umount "/tmp/.snap/snap/gtk-common-themes/",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/*",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/*/",
>
>  umount "/snap/gtk-common-themes/",
>
>  umount "/snap/gtk-common-themes/*",
>
>  umount "/snap/gtk-common-themes/*/",
>
>  # .. variant with mimic at /snap/gtk-common-themes/1535/
>
>  "/snap/gtk-common-themes/1535/" r,
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/" rw,
>
>  mount options=(rbind, rw) "/snap/gtk-common-themes/1535/" -> "/tmp/.snap/snap/gtk-common-themes/1535/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/gtk-common-themes/1535/",
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/*/" rw,
>
>  "/snap/gtk-common-themes/1535/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/gtk-common-themes/1535/*/" -> "/snap/gtk-common-themes/1535/*/",
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/*" rw,
>
>  "/snap/gtk-common-themes/1535/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/gtk-common-themes/1535/*" -> "/snap/gtk-common-themes/1535/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/gtk-common-themes/1535/",
>
>  umount "/tmp/.snap/snap/gtk-common-themes/1535/",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/*",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/*/",
>
>  umount "/snap/gtk-common-themes/1535/",
>
>  umount "/snap/gtk-common-themes/1535/*",
>
>  umount "/snap/gtk-common-themes/1535/*/",
>
>  # .. variant with mimic at /snap/gtk-common-themes/1535/share/
>
>  "/snap/gtk-common-themes/1535/share/" r,
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/share/" rw,
>
>  mount options=(rbind, rw) "/snap/gtk-common-themes/1535/share/" -> "/tmp/.snap/snap/gtk-common-themes/1535/share/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/gtk-common-themes/1535/share/",
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/share/*/" rw,
>
>  "/snap/gtk-common-themes/1535/share/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/gtk-common-themes/1535/share/*/" -> "/snap/gtk-common-themes/1535/share/*/",
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/share/*" rw,
>
>  "/snap/gtk-common-themes/1535/share/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/gtk-common-themes/1535/share/*" -> "/snap/gtk-common-themes/1535/share/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/gtk-common-themes/1535/share/",
>
>  umount "/tmp/.snap/snap/gtk-common-themes/1535/share/",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/share/",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/share/*",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/share/*/",
>
>  umount "/snap/gtk-common-themes/1535/share/",
>
>  umount "/snap/gtk-common-themes/1535/share/*",
>
>  umount "/snap/gtk-common-themes/1535/share/*/",
>
>  # .. variant with mimic at /snap/gtk-common-themes/1535/share/sounds/
>
>  "/snap/gtk-common-themes/1535/share/sounds/" r,
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/share/sounds/" rw,
>
>  mount options=(rbind, rw) "/snap/gtk-common-themes/1535/share/sounds/" -> "/tmp/.snap/snap/gtk-common-themes/1535/share/sounds/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/gtk-common-themes/1535/share/sounds/",
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/share/sounds/*/" rw,
>
>  "/snap/gtk-common-themes/1535/share/sounds/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/gtk-common-themes/1535/share/sounds/*/" -> "/snap/gtk-common-themes/1535/share/sounds/*/",
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/share/sounds/*" rw,
>
>  "/snap/gtk-common-themes/1535/share/sounds/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/gtk-common-themes/1535/share/sounds/*" -> "/snap/gtk-common-themes/1535/share/sounds/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/gtk-common-themes/1535/share/sounds/",
>
>  umount "/tmp/.snap/snap/gtk-common-themes/1535/share/sounds/",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/share/sounds/",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/share/sounds/*",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/share/sounds/*/",
>
>  umount "/snap/gtk-common-themes/1535/share/sounds/",
>
>  umount "/snap/gtk-common-themes/1535/share/sounds/*",
>
>  umount "/snap/gtk-common-themes/1535/share/sounds/*/",
>
>  # Writable mimic /snap/authy/19/data-dir/sounds
>
>  # .. variant with mimic at /snap/authy/
>
>  "/snap/authy/" r,
>
>  "/tmp/.snap/snap/authy/" rw,
>
>  mount options=(rbind, rw) "/snap/authy/" -> "/tmp/.snap/snap/authy/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/authy/",
>
>  "/tmp/.snap/snap/authy/*/" rw,
>
>  "/snap/authy/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/authy/*/" -> "/snap/authy/*/",
>
>  "/tmp/.snap/snap/authy/*" rw,
>
>  "/snap/authy/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/authy/*" -> "/snap/authy/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/authy/",
>
>  umount "/tmp/.snap/snap/authy/",
>
>  mount options=(rprivate) -> "/snap/authy/",
>
>  mount options=(rprivate) -> "/snap/authy/*",
>
>  mount options=(rprivate) -> "/snap/authy/*/",
>
>  umount "/snap/authy/",
>
>  umount "/snap/authy/*",
>
>  umount "/snap/authy/*/",
>
>  # .. variant with mimic at /snap/authy/19/
>
>  "/snap/authy/19/" r,
>
>  "/tmp/.snap/snap/authy/19/" rw,
>
>  mount options=(rbind, rw) "/snap/authy/19/" -> "/tmp/.snap/snap/authy/19/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/authy/19/",
>
>  "/tmp/.snap/snap/authy/19/*/" rw,
>
>  "/snap/authy/19/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/authy/19/*/" -> "/snap/authy/19/*/",
>
>  "/tmp/.snap/snap/authy/19/*" rw,
>
>  "/snap/authy/19/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/authy/19/*" -> "/snap/authy/19/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/authy/19/",
>
>  umount "/tmp/.snap/snap/authy/19/",
>
>  mount options=(rprivate) -> "/snap/authy/19/",
>
>  mount options=(rprivate) -> "/snap/authy/19/*",
>
>  mount options=(rprivate) -> "/snap/authy/19/*/",
>
>  umount "/snap/authy/19/",
>
>  umount "/snap/authy/19/*",
>
>  umount "/snap/authy/19/*/",
>
>  # .. variant with mimic at /snap/authy/19/data-dir/
>
>  "/snap/authy/19/data-dir/" r,
>
>  "/tmp/.snap/snap/authy/19/data-dir/" rw,
>
>  mount options=(rbind, rw) "/snap/authy/19/data-dir/" -> "/tmp/.snap/snap/authy/19/data-dir/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/authy/19/data-dir/",
>
>  "/tmp/.snap/snap/authy/19/data-dir/*/" rw,
>
>  "/snap/authy/19/data-dir/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/authy/19/data-dir/*/" -> "/snap/authy/19/data-dir/*/",
>
>  "/tmp/.snap/snap/authy/19/data-dir/*" rw,
>
>  "/snap/authy/19/data-dir/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/authy/19/data-dir/*" -> "/snap/authy/19/data-dir/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/authy/19/data-dir/",
>
>  umount "/tmp/.snap/snap/authy/19/data-dir/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/*",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/*/",
>
>  umount "/snap/authy/19/data-dir/",
>
>  umount "/snap/authy/19/data-dir/*",
>
>  umount "/snap/authy/19/data-dir/*/",
>
>  # .. variant with mimic at /snap/authy/19/data-dir/sounds/
>
>  "/snap/authy/19/data-dir/sounds/" r,
>
>  "/tmp/.snap/snap/authy/19/data-dir/sounds/" rw,
>
>  mount options=(rbind, rw) "/snap/authy/19/data-dir/sounds/" -> "/tmp/.snap/snap/authy/19/data-dir/sounds/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/authy/19/data-dir/sounds/",
>
>  "/tmp/.snap/snap/authy/19/data-dir/sounds/*/" rw,
>
>  "/snap/authy/19/data-dir/sounds/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/authy/19/data-dir/sounds/*/" -> "/snap/authy/19/data-dir/sounds/*/",
>
>  "/tmp/.snap/snap/authy/19/data-dir/sounds/*" rw,
>
>  "/snap/authy/19/data-dir/sounds/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/authy/19/data-dir/sounds/*" -> "/snap/authy/19/data-dir/sounds/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/authy/19/data-dir/sounds/",
>
>  umount "/tmp/.snap/snap/authy/19/data-dir/sounds/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/sounds/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/sounds/*",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/sounds/*/",
>
>  umount "/snap/authy/19/data-dir/sounds/",
>
>  umount "/snap/authy/19/data-dir/sounds/*",
>
>  umount "/snap/authy/19/data-dir/sounds/*/",
>
>  # Read-only content sharing authy:sound-themes -> gtk-common-themes:sound-themes (r#1)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/sounds/freedesktop/" -> "/snap/authy/19/data-dir/sounds/freedesktop{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/sounds/freedesktop{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/sounds/freedesktop{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/sounds/freedesktop{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#0)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/default/" -> "/snap/authy/19/data-dir/icons/default{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/default{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/default{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/default{,-[0-9]*}/",
>
>  # Writable mimic /snap/gtk-common-themes/1535/share/icons
>
>  # .. variant with mimic at /snap/gtk-common-themes/1535/share/icons/
>
>  "/snap/gtk-common-themes/1535/share/icons/" r,
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/share/icons/" rw,
>
>  mount options=(rbind, rw) "/snap/gtk-common-themes/1535/share/icons/" -> "/tmp/.snap/snap/gtk-common-themes/1535/share/icons/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/gtk-common-themes/1535/share/icons/",
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/share/icons/*/" rw,
>
>  "/snap/gtk-common-themes/1535/share/icons/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/gtk-common-themes/1535/share/icons/*/" -> "/snap/gtk-common-themes/1535/share/icons/*/",
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/share/icons/*" rw,
>
>  "/snap/gtk-common-themes/1535/share/icons/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/gtk-common-themes/1535/share/icons/*" -> "/snap/gtk-common-themes/1535/share/icons/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/gtk-common-themes/1535/share/icons/",
>
>  umount "/tmp/.snap/snap/gtk-common-themes/1535/share/icons/",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/share/icons/",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/share/icons/*",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/share/icons/*/",
>
>  umount "/snap/gtk-common-themes/1535/share/icons/",
>
>  umount "/snap/gtk-common-themes/1535/share/icons/*",
>
>  umount "/snap/gtk-common-themes/1535/share/icons/*/",
>
>  # Writable mimic /snap/authy/19/data-dir/icons
>
>  # .. variant with mimic at /snap/authy/19/data-dir/icons/
>
>  "/snap/authy/19/data-dir/icons/" r,
>
>  "/tmp/.snap/snap/authy/19/data-dir/icons/" rw,
>
>  mount options=(rbind, rw) "/snap/authy/19/data-dir/icons/" -> "/tmp/.snap/snap/authy/19/data-dir/icons/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/authy/19/data-dir/icons/",
>
>  "/tmp/.snap/snap/authy/19/data-dir/icons/*/" rw,
>
>  "/snap/authy/19/data-dir/icons/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/authy/19/data-dir/icons/*/" -> "/snap/authy/19/data-dir/icons/*/",
>
>  "/tmp/.snap/snap/authy/19/data-dir/icons/*" rw,
>
>  "/snap/authy/19/data-dir/icons/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/authy/19/data-dir/icons/*" -> "/snap/authy/19/data-dir/icons/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/authy/19/data-dir/icons/",
>
>  umount "/tmp/.snap/snap/authy/19/data-dir/icons/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/*",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/*/",
>
>  umount "/snap/authy/19/data-dir/icons/",
>
>  umount "/snap/authy/19/data-dir/icons/*",
>
>  umount "/snap/authy/19/data-dir/icons/*/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#1)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Adwaita/" -> "/snap/authy/19/data-dir/icons/Adwaita{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Adwaita{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Adwaita{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Adwaita{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#2)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/hicolor/" -> "/snap/authy/19/data-dir/icons/hicolor{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/hicolor{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/hicolor{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/hicolor{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#3)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/HighContrast/" -> "/snap/authy/19/data-dir/icons/HighContrast{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/HighContrast{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/HighContrast{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/HighContrast{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#4)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Humanity/" -> "/snap/authy/19/data-dir/icons/Humanity{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Humanity{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Humanity{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Humanity{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#5)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Humanity-Dark/" -> "/snap/authy/19/data-dir/icons/Humanity-Dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Humanity-Dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Humanity-Dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Humanity-Dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#6)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/ubuntu-mono-dark/" -> "/snap/authy/19/data-dir/icons/ubuntu-mono-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/ubuntu-mono-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/ubuntu-mono-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/ubuntu-mono-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#7)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/ubuntu-mono-light/" -> "/snap/authy/19/data-dir/icons/ubuntu-mono-light{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/ubuntu-mono-light{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/ubuntu-mono-light{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/ubuntu-mono-light{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#8)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/DMZ-Black/" -> "/snap/authy/19/data-dir/icons/DMZ-Black{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/DMZ-Black{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/DMZ-Black{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/DMZ-Black{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#9)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/DMZ-White/" -> "/snap/authy/19/data-dir/icons/DMZ-White{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/DMZ-White{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/DMZ-White{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/DMZ-White{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#10)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru/" -> "/snap/authy/19/data-dir/icons/Yaru{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#11)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-bark/" -> "/snap/authy/19/data-dir/icons/Yaru-bark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-bark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-bark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-bark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#12)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-blue/" -> "/snap/authy/19/data-dir/icons/Yaru-blue{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-blue{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-blue{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-blue{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#13)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-magenta/" -> "/snap/authy/19/data-dir/icons/Yaru-magenta{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-magenta{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-magenta{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-magenta{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#14)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-olive/" -> "/snap/authy/19/data-dir/icons/Yaru-olive{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-olive{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-olive{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-olive{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#15)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-prussiangreen/" -> "/snap/authy/19/data-dir/icons/Yaru-prussiangreen{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-prussiangreen{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-prussiangreen{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-prussiangreen{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#16)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-purple/" -> "/snap/authy/19/data-dir/icons/Yaru-purple{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-purple{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-purple{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-purple{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#17)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-red/" -> "/snap/authy/19/data-dir/icons/Yaru-red{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-red{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-red{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-red{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#18)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-sage/" -> "/snap/authy/19/data-dir/icons/Yaru-sage{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-sage{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-sage{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-sage{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#19)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-viridian/" -> "/snap/authy/19/data-dir/icons/Yaru-viridian{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-viridian{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-viridian{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-viridian{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#20)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-dark/" -> "/snap/authy/19/data-dir/icons/Yaru-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#21)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-bark-dark/" -> "/snap/authy/19/data-dir/icons/Yaru-bark-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-bark-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-bark-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-bark-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#22)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-blue-dark/" -> "/snap/authy/19/data-dir/icons/Yaru-blue-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-blue-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-blue-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-blue-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#23)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-magenta-dark/" -> "/snap/authy/19/data-dir/icons/Yaru-magenta-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-magenta-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-magenta-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-magenta-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#24)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-olive-dark/" -> "/snap/authy/19/data-dir/icons/Yaru-olive-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-olive-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-olive-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-olive-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#25)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-prussiangreen-dark/" -> "/snap/authy/19/data-dir/icons/Yaru-prussiangreen-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-prussiangreen-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-prussiangreen-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-prussiangreen-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#26)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-purple-dark/" -> "/snap/authy/19/data-dir/icons/Yaru-purple-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-purple-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-purple-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-purple-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#27)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-red-dark/" -> "/snap/authy/19/data-dir/icons/Yaru-red-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-red-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-red-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-red-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#28)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-sage-dark/" -> "/snap/authy/19/data-dir/icons/Yaru-sage-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-sage-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-sage-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-sage-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#29)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-viridian-dark/" -> "/snap/authy/19/data-dir/icons/Yaru-viridian-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-viridian-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-viridian-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-viridian-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#30)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/elementary/" -> "/snap/authy/19/data-dir/icons/elementary{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/elementary{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/elementary{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/elementary{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#31)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Ambiant-MATE/" -> "/snap/authy/19/data-dir/icons/Ambiant-MATE{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Ambiant-MATE{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Ambiant-MATE{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Ambiant-MATE{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#32)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Radiant-MATE/" -> "/snap/authy/19/data-dir/icons/Radiant-MATE{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Radiant-MATE{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Radiant-MATE{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Radiant-MATE{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#33)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-MATE-light/" -> "/snap/authy/19/data-dir/icons/Yaru-MATE-light{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-MATE-light{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-MATE-light{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-MATE-light{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#34)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-MATE-dark/" -> "/snap/authy/19/data-dir/icons/Yaru-MATE-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-MATE-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-MATE-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-MATE-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#35)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-mate/" -> "/snap/authy/19/data-dir/icons/Yaru-mate{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-mate{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-mate{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-mate{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#36)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Yaru-mate-dark/" -> "/snap/authy/19/data-dir/icons/Yaru-mate-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Yaru-mate-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Yaru-mate-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Yaru-mate-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#37)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Papirus-Adapta-Maia/" -> "/snap/authy/19/data-dir/icons/Papirus-Adapta-Maia{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Papirus-Adapta-Maia{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Papirus-Adapta-Maia{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Papirus-Adapta-Maia{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#38)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Papirus-Adapta-Nokto-Maia/" -> "/snap/authy/19/data-dir/icons/Papirus-Adapta-Nokto-Maia{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Papirus-Adapta-Nokto-Maia{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Papirus-Adapta-Nokto-Maia{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Papirus-Adapta-Nokto-Maia{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#39)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Papirus-Dark-Maia/" -> "/snap/authy/19/data-dir/icons/Papirus-Dark-Maia{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Papirus-Dark-Maia{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Papirus-Dark-Maia{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Papirus-Dark-Maia{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#40)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Papirus-Light-Maia/" -> "/snap/authy/19/data-dir/icons/Papirus-Light-Maia{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Papirus-Light-Maia{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Papirus-Light-Maia{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Papirus-Light-Maia{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#41)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Papirus-Maia/" -> "/snap/authy/19/data-dir/icons/Papirus-Maia{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Papirus-Maia{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Papirus-Maia{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Papirus-Maia{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#42)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/breeze_cursors/" -> "/snap/authy/19/data-dir/icons/breeze_cursors{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/breeze_cursors{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/breeze_cursors{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/breeze_cursors{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#43)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/Breeze_Snow/" -> "/snap/authy/19/data-dir/icons/Breeze_Snow{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/Breeze_Snow{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/Breeze_Snow{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/Breeze_Snow{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#44)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/elementary-xfce/" -> "/snap/authy/19/data-dir/icons/elementary-xfce{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/elementary-xfce{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/elementary-xfce{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/elementary-xfce{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#45)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/elementary-xfce-dark/" -> "/snap/authy/19/data-dir/icons/elementary-xfce-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/elementary-xfce-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/elementary-xfce-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/elementary-xfce-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#46)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/elementary-xfce-darker/" -> "/snap/authy/19/data-dir/icons/elementary-xfce-darker{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/elementary-xfce-darker{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/elementary-xfce-darker{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/elementary-xfce-darker{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#47)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/elementary-xfce-darkest/" -> "/snap/authy/19/data-dir/icons/elementary-xfce-darkest{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/elementary-xfce-darkest{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/elementary-xfce-darkest{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/elementary-xfce-darkest{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#48)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/handhelds/" -> "/snap/authy/19/data-dir/icons/handhelds{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/handhelds{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/handhelds{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/handhelds{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#49)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/redglass/" -> "/snap/authy/19/data-dir/icons/redglass{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/redglass{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/redglass{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/redglass{,-[0-9]*}/",
>
>  # Read-only content sharing authy:icon-themes -> gtk-common-themes:icon-themes (r#50)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/icons/whiteglass/" -> "/snap/authy/19/data-dir/icons/whiteglass{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/icons/whiteglass{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/icons/whiteglass{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/icons/whiteglass{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#0)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Adwaita/" -> "/snap/authy/19/data-dir/themes/Adwaita{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Adwaita{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Adwaita{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Adwaita{,-[0-9]*}/",
>
>  # Writable mimic /snap/gtk-common-themes/1535/share/themes
>
>  # .. variant with mimic at /snap/gtk-common-themes/1535/share/themes/
>
>  "/snap/gtk-common-themes/1535/share/themes/" r,
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/share/themes/" rw,
>
>  mount options=(rbind, rw) "/snap/gtk-common-themes/1535/share/themes/" -> "/tmp/.snap/snap/gtk-common-themes/1535/share/themes/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/gtk-common-themes/1535/share/themes/",
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/share/themes/*/" rw,
>
>  "/snap/gtk-common-themes/1535/share/themes/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/gtk-common-themes/1535/share/themes/*/" -> "/snap/gtk-common-themes/1535/share/themes/*/",
>
>  "/tmp/.snap/snap/gtk-common-themes/1535/share/themes/*" rw,
>
>  "/snap/gtk-common-themes/1535/share/themes/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/gtk-common-themes/1535/share/themes/*" -> "/snap/gtk-common-themes/1535/share/themes/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/gtk-common-themes/1535/share/themes/",
>
>  umount "/tmp/.snap/snap/gtk-common-themes/1535/share/themes/",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/share/themes/",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/share/themes/*",
>
>  mount options=(rprivate) -> "/snap/gtk-common-themes/1535/share/themes/*/",
>
>  umount "/snap/gtk-common-themes/1535/share/themes/",
>
>  umount "/snap/gtk-common-themes/1535/share/themes/*",
>
>  umount "/snap/gtk-common-themes/1535/share/themes/*/",
>
>  # Writable mimic /snap/authy/19/data-dir/themes
>
>  # .. variant with mimic at /snap/authy/19/data-dir/themes/
>
>  "/snap/authy/19/data-dir/themes/" r,
>
>  "/tmp/.snap/snap/authy/19/data-dir/themes/" rw,
>
>  mount options=(rbind, rw) "/snap/authy/19/data-dir/themes/" -> "/tmp/.snap/snap/authy/19/data-dir/themes/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/authy/19/data-dir/themes/",
>
>  "/tmp/.snap/snap/authy/19/data-dir/themes/*/" rw,
>
>  "/snap/authy/19/data-dir/themes/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/authy/19/data-dir/themes/*/" -> "/snap/authy/19/data-dir/themes/*/",
>
>  "/tmp/.snap/snap/authy/19/data-dir/themes/*" rw,
>
>  "/snap/authy/19/data-dir/themes/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/authy/19/data-dir/themes/*" -> "/snap/authy/19/data-dir/themes/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/authy/19/data-dir/themes/",
>
>  umount "/tmp/.snap/snap/authy/19/data-dir/themes/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/*",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/*/",
>
>  umount "/snap/authy/19/data-dir/themes/",
>
>  umount "/snap/authy/19/data-dir/themes/*",
>
>  umount "/snap/authy/19/data-dir/themes/*/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#1)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Adwaita-dark/" -> "/snap/authy/19/data-dir/themes/Adwaita-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Adwaita-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Adwaita-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Adwaita-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#2)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/HighContrast/" -> "/snap/authy/19/data-dir/themes/HighContrast{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/HighContrast{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/HighContrast{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/HighContrast{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#3)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Ambiance/" -> "/snap/authy/19/data-dir/themes/Ambiance{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Ambiance{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Ambiance{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Ambiance{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#4)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Radiance/" -> "/snap/authy/19/data-dir/themes/Radiance{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Radiance{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Radiance{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Radiance{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#5)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Arc/" -> "/snap/authy/19/data-dir/themes/Arc{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Arc{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Arc{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Arc{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#6)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Arc-Dark/" -> "/snap/authy/19/data-dir/themes/Arc-Dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Arc-Dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Arc-Dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Arc-Dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#7)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Arc-Darker/" -> "/snap/authy/19/data-dir/themes/Arc-Darker{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Arc-Darker{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Arc-Darker{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Arc-Darker{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#8)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Breeze/" -> "/snap/authy/19/data-dir/themes/Breeze{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Breeze{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Breeze{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Breeze{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#9)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Breeze-Dark/" -> "/snap/authy/19/data-dir/themes/Breeze-Dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Breeze-Dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Breeze-Dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Breeze-Dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#10)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-light/" -> "/snap/authy/19/data-dir/themes/Yaru-light{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-light{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-light{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-light{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#11)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru/" -> "/snap/authy/19/data-dir/themes/Yaru{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#12)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-bark/" -> "/snap/authy/19/data-dir/themes/Yaru-bark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-bark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-bark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-bark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#13)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-blue/" -> "/snap/authy/19/data-dir/themes/Yaru-blue{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-blue{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-blue{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-blue{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#14)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-magenta/" -> "/snap/authy/19/data-dir/themes/Yaru-magenta{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-magenta{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-magenta{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-magenta{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#15)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-olive/" -> "/snap/authy/19/data-dir/themes/Yaru-olive{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-olive{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-olive{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-olive{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#16)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-prussiangreen/" -> "/snap/authy/19/data-dir/themes/Yaru-prussiangreen{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-prussiangreen{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-prussiangreen{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-prussiangreen{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#17)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-purple/" -> "/snap/authy/19/data-dir/themes/Yaru-purple{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-purple{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-purple{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-purple{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#18)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-red/" -> "/snap/authy/19/data-dir/themes/Yaru-red{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-red{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-red{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-red{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#19)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-sage/" -> "/snap/authy/19/data-dir/themes/Yaru-sage{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-sage{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-sage{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-sage{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#20)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-viridian/" -> "/snap/authy/19/data-dir/themes/Yaru-viridian{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-viridian{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-viridian{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-viridian{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#21)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-dark/" -> "/snap/authy/19/data-dir/themes/Yaru-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#22)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-bark-dark/" -> "/snap/authy/19/data-dir/themes/Yaru-bark-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-bark-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-bark-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-bark-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#23)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-blue-dark/" -> "/snap/authy/19/data-dir/themes/Yaru-blue-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-blue-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-blue-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-blue-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#24)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-magenta-dark/" -> "/snap/authy/19/data-dir/themes/Yaru-magenta-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-magenta-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-magenta-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-magenta-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#25)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-olive-dark/" -> "/snap/authy/19/data-dir/themes/Yaru-olive-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-olive-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-olive-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-olive-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#26)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-prussiangreen-dark/" -> "/snap/authy/19/data-dir/themes/Yaru-prussiangreen-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-prussiangreen-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-prussiangreen-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-prussiangreen-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#27)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-purple-dark/" -> "/snap/authy/19/data-dir/themes/Yaru-purple-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-purple-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-purple-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-purple-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#28)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-red-dark/" -> "/snap/authy/19/data-dir/themes/Yaru-red-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-red-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-red-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-red-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#29)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-sage-dark/" -> "/snap/authy/19/data-dir/themes/Yaru-sage-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-sage-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-sage-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-sage-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#30)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-viridian-dark/" -> "/snap/authy/19/data-dir/themes/Yaru-viridian-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-viridian-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-viridian-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-viridian-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#31)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/elementary/" -> "/snap/authy/19/data-dir/themes/elementary{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/elementary{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/elementary{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/elementary{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#32)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Ambiant-MATE/" -> "/snap/authy/19/data-dir/themes/Ambiant-MATE{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Ambiant-MATE{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Ambiant-MATE{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Ambiant-MATE{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#33)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Ambiant-MATE-Dark/" -> "/snap/authy/19/data-dir/themes/Ambiant-MATE-Dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Ambiant-MATE-Dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Ambiant-MATE-Dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Ambiant-MATE-Dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#34)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Radiant-MATE/" -> "/snap/authy/19/data-dir/themes/Radiant-MATE{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Radiant-MATE{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Radiant-MATE{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Radiant-MATE{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#35)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-MATE-light/" -> "/snap/authy/19/data-dir/themes/Yaru-MATE-light{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-MATE-light{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-MATE-light{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-MATE-light{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#36)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-MATE-dark/" -> "/snap/authy/19/data-dir/themes/Yaru-MATE-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-MATE-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-MATE-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-MATE-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#37)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-mate/" -> "/snap/authy/19/data-dir/themes/Yaru-mate{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-mate{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-mate{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-mate{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#38)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Yaru-mate-dark/" -> "/snap/authy/19/data-dir/themes/Yaru-mate-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Yaru-mate-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Yaru-mate-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Yaru-mate-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#39)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Matcha-aliz/" -> "/snap/authy/19/data-dir/themes/Matcha-aliz{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Matcha-aliz{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Matcha-aliz{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Matcha-aliz{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#40)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Matcha-azul/" -> "/snap/authy/19/data-dir/themes/Matcha-azul{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Matcha-azul{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Matcha-azul{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Matcha-azul{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#41)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Matcha-dark-aliz/" -> "/snap/authy/19/data-dir/themes/Matcha-dark-aliz{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Matcha-dark-aliz{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Matcha-dark-aliz{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Matcha-dark-aliz{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#42)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Matcha-dark-azul/" -> "/snap/authy/19/data-dir/themes/Matcha-dark-azul{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Matcha-dark-azul{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Matcha-dark-azul{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Matcha-dark-azul{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#43)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Matcha-dark-sea/" -> "/snap/authy/19/data-dir/themes/Matcha-dark-sea{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Matcha-dark-sea{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Matcha-dark-sea{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Matcha-dark-sea{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#44)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Matcha-sea/" -> "/snap/authy/19/data-dir/themes/Matcha-sea{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Matcha-sea{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Matcha-sea{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Matcha-sea{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#45)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Greybird/" -> "/snap/authy/19/data-dir/themes/Greybird{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Greybird{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Greybird{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Greybird{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#46)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Greybird-dark/" -> "/snap/authy/19/data-dir/themes/Greybird-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Greybird-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Greybird-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Greybird-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#47)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Materia/" -> "/snap/authy/19/data-dir/themes/Materia{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Materia{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Materia{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Materia{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#48)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Materia-compact/" -> "/snap/authy/19/data-dir/themes/Materia-compact{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Materia-compact{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Materia-compact{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Materia-compact{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#49)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Materia-dark/" -> "/snap/authy/19/data-dir/themes/Materia-dark{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Materia-dark{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Materia-dark{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Materia-dark{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#50)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Materia-dark-compact/" -> "/snap/authy/19/data-dir/themes/Materia-dark-compact{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Materia-dark-compact{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Materia-dark-compact{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Materia-dark-compact{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#51)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Materia-light/" -> "/snap/authy/19/data-dir/themes/Materia-light{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Materia-light{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Materia-light{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Materia-light{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gtk-3-themes -> gtk-common-themes:gtk-3-themes (r#52)
>
>  mount options=(bind) "/snap/gtk-common-themes/1535/share/themes/Materia-light-compact/" -> "/snap/authy/19/data-dir/themes/Materia-light-compact{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/data-dir/themes/Materia-light-compact{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/data-dir/themes/Materia-light-compact{,-[0-9]*}/",
>
>  umount "/snap/authy/19/data-dir/themes/Materia-light-compact{,-[0-9]*}/",
>
>  # Read-only content sharing authy:gnome-3-28-1804 -> gnome-3-28-1804:gnome-3-28-1804 (r#0)
>
>  mount options=(bind) "/snap/gnome-3-28-1804/198/" -> "/snap/authy/19/gnome-platform{,-[0-9]*}/",
>
>  remount options=(bind, ro) "/snap/authy/19/gnome-platform{,-[0-9]*}/",
>
>  mount options=(rprivate) -> "/snap/authy/19/gnome-platform{,-[0-9]*}/",
>
>  umount "/snap/authy/19/gnome-platform{,-[0-9]*}/",
>
>  # Writable mimic /snap/gnome-3-28-1804
>
>  # .. variant with mimic at /snap/gnome-3-28-1804/
>
>  "/snap/gnome-3-28-1804/" r,
>
>  "/tmp/.snap/snap/gnome-3-28-1804/" rw,
>
>  mount options=(rbind, rw) "/snap/gnome-3-28-1804/" -> "/tmp/.snap/snap/gnome-3-28-1804/",
>
>  mount fstype=tmpfs options=(rw) tmpfs -> "/snap/gnome-3-28-1804/",
>
>  "/tmp/.snap/snap/gnome-3-28-1804/*/" rw,
>
>  "/snap/gnome-3-28-1804/*/" rw,
>
>  mount options=(rbind, rw) "/tmp/.snap/snap/gnome-3-28-1804/*/" -> "/snap/gnome-3-28-1804/*/",
>
>  "/tmp/.snap/snap/gnome-3-28-1804/*" rw,
>
>  "/snap/gnome-3-28-1804/*" rw,
>
>  mount options=(bind, rw) "/tmp/.snap/snap/gnome-3-28-1804/*" -> "/snap/gnome-3-28-1804/*",
>
>  mount options=(rprivate) -> "/tmp/.snap/snap/gnome-3-28-1804/",
>
>  umount "/tmp/.snap/snap/gnome-3-28-1804/",
>
>  mount options=(rprivate) -> "/snap/gnome-3-28-1804/",
>
>  mount options=(rprivate) -> "/snap/gnome-3-28-1804/*",
>
>  mount options=(rprivate) -> "/snap/gnome-3-28-1804/*/",
>
>  umount "/snap/gnome-3-28-1804/",
>
>  umount "/snap/gnome-3-28-1804/*",
>
>  umount "/snap/gnome-3-28-1804/*/",
>
>  # Writable mimic /snap/authy/19
>
>}

Actions: View

Attachments on bug 1211989: 867626 | 867627 | 867630 | 867631 | 867632 | 867633 | 867634 | 867635 | 867652