From 679be32910d10cb93db5700157b7091a667800e9 Mon Sep 17 00:00:00 2001
From: Denis Chevalier <perso@denischevalier.fr>
Date: Thu, 6 Aug 2026 11:57:50 +0200
Subject: add hardened overrides to allow for flatpak

---
 etc.bash                                | 1 +
 etc/sysctl.d/98-hardened-overrides.conf | 1 +
 2 files changed, 2 insertions(+)
 create mode 100644 etc/sysctl.d/98-hardened-overrides.conf

diff --git a/etc.bash b/etc.bash
index b5d35a7..282cf16 100755
--- a/etc.bash
+++ b/etc.bash
@@ -6,6 +6,7 @@ sudo cp -v etc/pam.d/system-local-login /etc/pam.d
 sudo cp -v etc/pam.d/login /etc/pam.d
 sudo cp -v etc/updatedb.conf /etc/
 sudo cp -v etc/sysctl.d/99-security.conf /etc/sysctl.d
+sudo cp -v etc/sysctl.d/98-hardened-overrides.conf /etc/sysctl.d
 sudo sysctl --system
 
 # firewall
diff --git a/etc/sysctl.d/98-hardened-overrides.conf b/etc/sysctl.d/98-hardened-overrides.conf
new file mode 100644
index 0000000..c4ee63d
--- /dev/null
+++ b/etc/sysctl.d/98-hardened-overrides.conf
@@ -0,0 +1 @@
+kernel.unprivileged_userns_clone = 1
-- 
cgit