That depends on:
kernel.apparmor_restrict_unprivileged_userns
See: https://gitlab.com/apparmor/apparmor/-/wikis/unprivileged_userns_restriction
That depends on:
kernel. apparmor_ restrict_ unprivileged_ userns
See: https:/ /gitlab. com/apparmor/ apparmor/ -/wikis/ unprivileged_ userns_ restriction