diff options
Diffstat (limited to 'etc/templates/profile.template')
| -rw-r--r-- | etc/templates/profile.template | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/templates/profile.template b/etc/templates/profile.template index 3d37fc827..9e9fc3fe9 100644 --- a/etc/templates/profile.template +++ b/etc/templates/profile.template | |||
| @@ -103,6 +103,9 @@ include globals.local | |||
| 103 | # Allows files commonly used by IDEs | 103 | # Allows files commonly used by IDEs |
| 104 | #include allow-common-devel.inc | 104 | #include allow-common-devel.inc |
| 105 | 105 | ||
| 106 | # Allow ssh (blacklisted by disable-common.inc) | ||
| 107 | #include allow-ssh.inc | ||
| 108 | |||
| 106 | #include disable-common.inc | 109 | #include disable-common.inc |
| 107 | #include disable-devel.inc | 110 | #include disable-devel.inc |
| 108 | #include disable-exec.inc | 111 | #include disable-exec.inc |
| @@ -158,6 +161,7 @@ include globals.local | |||
| 158 | ##seccomp !chroot | 161 | ##seccomp !chroot |
| 159 | ##seccomp.drop SYSCALLS (see syscalls.txt) | 162 | ##seccomp.drop SYSCALLS (see syscalls.txt) |
| 160 | #seccomp.block-secondary | 163 | #seccomp.block-secondary |
| 164 | ##seccomp-error-action log (Only for debugging seccomp issues) | ||
| 161 | #shell none | 165 | #shell none |
| 162 | #tracelog | 166 | #tracelog |
| 163 | # Prefer 'x11 none' instead of 'blacklist /tmp/.X11-unix' if 'net none' is set | 167 | # Prefer 'x11 none' instead of 'blacklist /tmp/.X11-unix' if 'net none' is set |