Zyga - I think given the nature of this issue, your proposed solution seems reasonable - snap-update-ns is trusted and the apparmor profile is there to limit possible damage if it were to somehow be compromised - but it should also not block it from accomplishing its intended functionality. So this seems like the correct solution.
Zyga - I think given the nature of this issue, your proposed solution seems reasonable - snap-update-ns is trusted and the apparmor profile is there to limit possible damage if it were to somehow be compromised - but it should also not block it from accomplishing its intended functionality. So this seems like the correct solution.