diff --git a/linux/system/single/mcp.yml b/linux/system/single/mcp.yml
index 74afc08..496bc7e 100644
--- a/linux/system/single/mcp.yml
+++ b/linux/system/single/mcp.yml
@@ -26,6 +26,7 @@
           net.core.netdev_max_backlog: 261144
           net.ipv4.tcp_tw_reuse: 1
           kernel.panic: 60
+          kernel.unprivileged_userns_clone: 0
       cpu:
         governor: performance
       limit: