> + /* ALT Linux has an alternate way of doing the same. */
> + { "/proc/sys/kernel/unprivileged_userns_clone", 0, 1, 0 },
Those two lines should be swapped, as the comment refers to this
following line:
> + { "/proc/sys/kernel/userns_restrict", 1, 0, 0 },
LGTM to commit with that change.
Reviewed-by: DJ Delorie <dj@redhat.com>