aboutsummaryrefslogtreecommitdiffstats
path: root/etc/ssh.profile
diff options
context:
space:
mode:
authorLibravatar Fred Barclay <Fred-Barclay@users.noreply.github.com>2017-08-07 13:41:08 -0500
committerLibravatar GitHub <noreply@github.com>2017-08-07 13:41:08 -0500
commite24b15f8647997dbb26a7152c921af94e36294ce (patch)
tree4c98b42844c8c67853643d4b4b7253dbd8764f1e /etc/ssh.profile
parentmerges (diff)
parentUnify last 8 profiles (diff)
downloadfirejail-e24b15f8647997dbb26a7152c921af94e36294ce.tar.gz
firejail-e24b15f8647997dbb26a7152c921af94e36294ce.tar.zst
firejail-e24b15f8647997dbb26a7152c921af94e36294ce.zip
Merge pull request #1427 from SpotComms/pr
Unify all profiles
Diffstat (limited to 'etc/ssh.profile')
-rw-r--r--etc/ssh.profile19
1 files changed, 9 insertions, 10 deletions
diff --git a/etc/ssh.profile b/etc/ssh.profile
index 466abdc88..ac3b7a0ba 100644
--- a/etc/ssh.profile
+++ b/etc/ssh.profile
@@ -1,19 +1,18 @@
1# Firejail profile for ssh
2# This file is overwritten after every install/update
1quiet 3quiet
2# Persistent global definitions go here 4# Persistent local customizations
3include /etc/firejail/globals.local
4
5# This file is overwritten during software install.
6# Persistent customizations should go in a .local file.
7include /etc/firejail/ssh.local 5include /etc/firejail/ssh.local
6# Persistent global definitions
7include /etc/firejail/globals.local
8 8
9# ssh client
10noblacklist ~/.ssh
11noblacklist /tmp/ssh-*
12noblacklist /etc/ssh 9noblacklist /etc/ssh
10noblacklist /tmp/ssh-*
11noblacklist ~/.ssh
13 12
14include /etc/firejail/disable-common.inc 13include /etc/firejail/disable-common.inc
15include /etc/firejail/disable-programs.inc
16include /etc/firejail/disable-passwdmgr.inc 14include /etc/firejail/disable-passwdmgr.inc
15include /etc/firejail/disable-programs.inc
17 16
18caps.drop all 17caps.drop all
19ipc-namespace 18ipc-namespace
@@ -29,7 +28,7 @@ shell none
29tracelog 28tracelog
30 29
31private-dev 30private-dev
32#private-tmp #Breaks when exiting 31# private-tmp # Breaks when exiting
33 32
34memory-deny-write-execute 33memory-deny-write-execute
35noexec ${HOME} 34noexec ${HOME}