# Ubuntu 24.04+ requires an explicit user-namespace allowance for Chromium.
# This exact executable is installed root-owned by the UnboundChat package.
# Chromium's own namespace/seccomp sandbox remains enabled.
abi <abi/4.0>,
include <tunables/global>

profile unboundchat-browser /opt/unboundchat/data/browser/chromium/chrome-headless-shell-linux64/chrome-headless-shell flags=(unconfined) {
  userns,
  include if exists <local/unboundchat-browser>
}
