My question is not regarding the advantages/disadvantages of the new apparmor namespace restrictions of Ubuntu 24.04 lts.Instead I want to know if performing this action
kernel.apparmor_restrict_unprivileged_userns = 0
make the system any more "unsafe" than what is 22.04 lts.
A workaround for docker-desktop
is to disable this flag.
I read somewhere that its default value is 0 on 22.04. But I am not sure if this is the only relevant thing that has been changed in 24.04 and undoing it may cause some exploit that was being checked through other means on 22.04.