# AppArmor cursor-sandbox profile incomplete on Linux — sandbox does not work correctly (missing network, signal, userns) **URL:** \ **Category:** Bug Reports\ **Tags:** sandbox, linux, installation\ **Created:** [March 4, 2026, 3:12am UTC](https://forum.cursor.com/t/apparmor-cursor-sandbox-profile-incomplete-on-linux-sandbox-does-not-work-correctly-missing-network-signal-userns/153506 "2026-03-04T03:12:18Z")\ **Posts on this page:** 1\ **Showing post:** 5
**Author:** ![deanrie](https://sea3.discourse-cdn.com/cursor1/user_avatar/forum.cursor.com/deanrie/32/1263_2.png) [@deanrie](https://forum.cursor.com/u/deanrie)\ **Post date:** [March 4, 2026, 4:44am UTC](https://forum.cursor.com/t/apparmor-cursor-sandbox-profile-incomplete-on-linux-sandbox-does-not-work-correctly-missing-network-signal-userns/153506/5 "2026-03-04T04:44:42Z")
Hey, thanks for the detailed report, and @a2f3, great add-on about `dac_override` and the profile for the main binary. This is a known issue affecting users on Ubuntu 24.04+ with AppArmor 4.0 and kernel 6.2+. A few forum threads with the same problem: - [Terminal Sandbox Issue Linux](https://forum.cursor.com/t/terminal-sandbox-issue-linux/152979) (1,100+ views) - [Cursor-sandbox-remote AppArmor profile missing abi declaration](https://forum.cursor.com/t/cursor-sandbox-remote-apparmor-profile-missing-abi-declaration-and-network-rule-breaks-sandbox-on-ubuntu-24-04/153478) The team is aware. I shared your thread for prioritization since it has the most complete analysis and a concrete proposed profile. There is no ETA for a fix yet. For now, your workaround with `chattr +i` is probably the best option for users who want to keep AppArmor enabled. For users who want a quick fix, disabling the user namespaces restriction also works: ```bash sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 ``` (but this is less secure) I’ll post an update here if there’s any news. --- _[View the full topic](https://forum.cursor.com/t/apparmor-cursor-sandbox-profile-incomplete-on-linux-sandbox-does-not-work-correctly-missing-network-signal-userns/153506)._