https://zylos.ai/zh/research/2026-09-01-unprivileged-userns-restrictions-container-agent-sandboxes/
Unprivileged User-Namespace Restrictions Colliding with AI-Agent Sandboxes | Zylos Research
Sep 1, 2026 - How Ubuntu's apparmor_restrict_unprivileged_userns kernel hardening breaks bubblewrap, Chrome, Electron, and Flatpak sandboxes, and why the collision gets...
unprivileged userai agentnamespacerestrictionscolliding