# Ubuntu 24.04 and later refuse user namespaces to programs with no profile, and WebKit's sandbox needs them to shut each
# page's process off from the family's files. This allows that and confines nothing else, as Ubuntu's own browsers do.
abi <abi/4.0>,
include <tunables/global>

profile all-around-music /usr/bin/all-around-music flags=(unconfined) {
  userns,
  include if exists <local/all-around-music>
}
