Plans for user namespaces

[Peter Wienemann <wienemann@physik.uni-bonn.de>]

Dear kernel experts,

I've got some questions concerning the plans for user namespaces:

1. In stretch unprivileged user namespaces are enabled in the
compile-time configuration of the kernel but disabled in the run-time
configuration by default. As a consequence one needs to set
"kernel.unprivileged_userns_clone=1" before one can make use of them.
Are there any plans to change the default run-time configuration for buster?

2. If the answer to the first question is "no", what is the preferred
behaviour upon installation of packages requiring the above feature?

   a) Warn the user and ask him/her to switch them on?
   b) Silently switch them on?
   c) Add instructions in README.Debian?
   d) Something else?

Cheers, Peter