# Tark: Ubuntu 23.10 and later let only profiled programs create the user
# namespaces Chromium's sandbox uses; this profile allows that and nothing
# else changes (unconfined), as Chrome's and Brave's packages do.
abi <abi/4.0>,
include <tunables/global>

profile tark /opt/tark/chrome flags=(unconfined) {
  userns,

  include if exists <local/tark>
}
