Comment 2 for bug 1865519

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

We've discussed this in the past and it was determined that 'aa-status' is to be part of every apparmor minimal install (which is why it is in apparmor and all the other python tools are in apparmor-utils) so splitting out of apparmor-minimal doesn't really work with this thinking.

Perhaps moving aa-status to a new 'apparmor-status' package, have it Depends on python3, then have the 'apparmor' package Recommends 'apparmor-status' could be a way to go. snapd should still Depends on apparmor, which would pull in apparmor-status (and it should-- we want aa-status on UC devices, etc).

Alternatively, aa-status could be rewritten in C/C++ (like other parts of apparmor). This is probably the best solution for your problem.

Can you elaborate on the problem this is trying to solve (building snaps unnecessarily installs python3 onto the system-- why specifically is this an issue?)