It seems the apparmor patches for full snap confinement has finally landed
(snapcraft.io forum post)
great, seems it landed for 6.17 – https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8b45c6c90af6702b2ad716e148b8bcd5231a8070
I guess canonical will drop the ubuntu sauce then? As far as the forum knows, it needs apparmor 4.1 to work (which is in the 25.04 snapd deb package) but is not yet in the snapd snap.
So my understanding for older ubuntu one would need a backport/snapd snap in order for full confinement with the 6.17 kernel. Is that right?