Why is "all device" access required for Cryptomator to operate?

Help Desktop App
1

When I disable “All devices (e.g., webcam)” permissions, Cryptomator crashes when attempting to unlock a vault stored on the local drive.

Error Code 6HCL:2GTN:615N org.cryptomator.integrations.mount.MountFailedException: org.cryptomator.jfuse.api.FuseMountFailedException: fuse_mount failed at org.cryptomator.frontend.fuse@5.1.0/org.cryptomator.frontend.fuse.mount.LinuxFuseMountProvider$LinuxFuseMountBuilder.mount(LinuxFuseMountProvider.java:137) at org.cryptomator.desktop@1.18.0/org.cryptomator.common.mount.Mounter.mount(Mounter.java:172) at org.cryptomator.desktop@1.18.0/org.cryptomator.common.vaults.Vault.unlock(Vault.java:179) at org.cryptomator.desktop@1.18.0/org.cryptomator.ui.keyloading.KeyLoadingStrategy.use(KeyLoadingStrategy.java:109) at org.cryptomator.desktop@1.18.0/org.cryptomator.ui.unlock.UnlockWorkflow.call(UnlockWorkflow.java:82) at org.cryptomator.desktop@1.18.0/org.cryptomator.ui.unlock.UnlockWorkflow.call(UnlockWorkflow.java:37) at javafx.graphics@25.0.1/javafx.concurrent.Task$TaskCallable.call(Unknown Source) at java.base/java.util.concurrent.FutureTask.run(Unknown Source) at java.base/java.util.concurrent.CompletableFuture$UniAccept.tryFire(Unknown Source) at java.base/java.util.concurrent.CompletableFuture$Completion.run(Unknown Source) at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) at java.base/java.lang.Thread.run(Unknown Source) Caused by: org.cryptomator.jfuse.api.FuseMountFailedException: fuse_mount failed at org.cryptomator.jfuse.linux.amd64@0.7.3/org.cryptomator.jfuse.linux.amd64.FuseImpl.mount(FuseImpl.java:33) at org.cryptomator.jfuse.api@0.7.3/org.cryptomator.jfuse.api.Fuse.mount(Fuse.java:126) at org.cryptomator.frontend.fuse@5.1.0/org.cryptomator.frontend.fuse.mount.LinuxFuseMountProvider$LinuxFuseMountBuilder.mount(LinuxFuseMountProvider.java:134) ... 12 more

I have read/modify permissions granted to “All user files” and the 2nd partition where the vault resides.
Why does this app require permissions to ALL devices if I just want to use a vault on a single physical drive?

2

Welcome to the Cryptomator Community :slightly_smiling_face: ,

Cryptomator does not access the webcam. But it still needs mission to access all devices.

To mount vaults, Cryptomator needs access to the FUSE device. Since this cannot be specifically chosen, the most general permission (access all) for devices is required.