diff --git a/local.conf b/local.conf
index b9a9000..728db4b 100644
--- a/local.conf
+++ b/local.conf
@@ -20,6 +20,8 @@ vm.mmap_rnd_compat_bits = 16
 
 kernel.kptr_restrict = 2
 
+kernel.unprivileged_userns_clone = 0
+
 kernel.unprivileged_bpf_disabled = 1
 net.core.bpf_jit_harden = 2