# Arcline Workstation — desktop relaxation overrides
# The base hardening is strict (perf_event_paranoid=3 blocks `perf` for
# unprivileged users). A workstation developer wants perf, tracing, and
# unprivileged user namespaces (used by podman/rootless containers). These
# lines land AFTER the base file, so they win.

kernel.perf_event_paranoid=1
kernel.unprivileged_bpf_disabled=0
kernel.yama.ptrace_scope=0

# rootless containers
kernel.unprivileged_userns_clone=1