diff --git a/debian.master/config/annotations b/debian.master/config/annotations
index 470e1ae12662..0dd401411c77 100644
--- a/debian.master/config/annotations
+++ b/debian.master/config/annotations
@@ -594,6 +594,9 @@ CONFIG_SCSI_IPR_TRACE                           note<'LP: #1343109'>
 CONFIG_SCSI_VIRTIO                              policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
 CONFIG_SCSI_VIRTIO                              note<'enable initrdless boot in VMs for ease of use, cloud-kernel parity and disaster recovery, LP: #1685291'>
 
+CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS        policy<{'amd64': 'n', 'arm64': 'n', 'armhf': 'n', 'ppc64el': 'n', 'riscv64': 'n', 's390x': 'n'}>
+CONFIG_SECURITY_APPARMOR_RESTRICT_USERNS        note<'LP: #1990064'>
+
 CONFIG_SECURITY_SAFESETID                       policy<{'amd64': 'y', 'arm64': 'y', 'armhf': 'y', 'ppc64el': 'y', 'riscv64': 'y', 's390x': 'y'}>
 CONFIG_SECURITY_SAFESETID                       note<'LP: #1845391'>