[00:27] deathmist: you can create a profile for bwrap itself locally if you want (but we haven't done that for the distro since it would allow any malware to just call bwrap to get a new user namespace and hence bypass this restriction) [00:28] eg. a profile like the ones mentioned in https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/2046844/comments/5 should be sufficient for your needs [00:28] -ubottu:#ubuntu-next- Launchpad bug 2046844 in angelfish (Ubuntu) "AppArmor user namespace creation restrictions cause many applications to crash with SIGTRAP" [Critical, In Progress] === JanC is now known as Guest1755 === JanC_ is now known as JanC