Is there any way to toggle ujust toggle-container-domain-userns-creation for selective apps? | secureblue | Page 1

crimson zodiac Sep 5, 2025, 3:37 AM

#

I do not want to ujust toggle for all apps but only for bubblejail

hollow ivy Sep 5, 2025, 3:37 AM

#

the command you listed doesn't enable userns for bubblejail

#

i think you meant to type ujust toggle-unconfined-domain-userns-creation

crimson zodiac Sep 5, 2025, 3:38 AM

#

Yes

hollow ivy Sep 5, 2025, 3:38 AM

#

and no, it is not possible without writing your own policy

#

to confine bubblejail

#

but even then

#

bubblejail has no seccomp filter by default

#

so it would be equialent to enabling it for all apps, from a security perspective

#Is there any way to toggle ujust toggle-container-domain-userns-creation for selective apps?