> I know of at least three Ubuntu derivatives who have Snap preinstalled and every snap I maintain has between 5% and 10% non-Ubuntu users. Pop!_OS doesn't ins

> I know of at least three Ubuntu derivatives who have Snap preinstalled and every snap I maintain has between 5% and 10% non-Ubuntu users. Pop!_OS doesn't install snap by default, but it does Flatpak. > Given that every AppArmor thing Snap needs is in the upstream kernel, any distribution with a fairly recent kernel an userspace has full confinement Just because it is in upstream kernel, does not mean it is used by other distributions. Only that it can be used. But so can be SELinux, which is also in upstream kernel. > The main limitation is that Snap can't run when SELinux is running at the same time. Exactly, different distributions have chosen different LSMs in the past and they are going to stick with them. RHEL or Fedora are not going to switch to AppArmor anytime soon. > Canonical is working with a bunch of other people on LSM stacking in order to make that work. Good for them that they are realizing this is a problem. Flatpak was developed from the start with the different LSMs in mind. > That might not be something you use outside of experiments, but don't generalize statements like that. OK, some people might be too brave ;)