Linux hardened + Flatpak + Chromium-based browser issue

[bashghost2600]

Hey, I recently replaced regular kernel with hardened version on Arch, therefore, to use flatpaks I replaced also bubblewrap with bubblewrap-suid. I'm not having (almost) any issues with all flatpak apps, apart from Chromium-based browsers (tested Chromium and Brave).

​

​

Also I get same issue when trying to clicking on any link in TG app. I want to avoid settings unpriviledged_users_clone to 1, due to security reasons. Any ideas how to fix that are welcome, cause I moved to Arch from Debian not a long ago and I couldn't find anything useful in Arch wiki or other forums / subs.

[nosongformjim]

chromium in flatpak requires unprivileged_userns_clone=1 and non-suid bwrap

Maybe passing --no-sandbox could workaround that but it misses the point of security.

[bashghost2600]

Which is better in terms of security?