diff options
Diffstat (limited to 'etc/templates/profile.template')
-rw-r--r-- | etc/templates/profile.template | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/etc/templates/profile.template b/etc/templates/profile.template index 3d37fc827..9e9fc3fe9 100644 --- a/etc/templates/profile.template +++ b/etc/templates/profile.template | |||
@@ -103,6 +103,9 @@ include globals.local | |||
103 | # Allows files commonly used by IDEs | 103 | # Allows files commonly used by IDEs |
104 | #include allow-common-devel.inc | 104 | #include allow-common-devel.inc |
105 | 105 | ||
106 | # Allow ssh (blacklisted by disable-common.inc) | ||
107 | #include allow-ssh.inc | ||
108 | |||
106 | #include disable-common.inc | 109 | #include disable-common.inc |
107 | #include disable-devel.inc | 110 | #include disable-devel.inc |
108 | #include disable-exec.inc | 111 | #include disable-exec.inc |
@@ -158,6 +161,7 @@ include globals.local | |||
158 | ##seccomp !chroot | 161 | ##seccomp !chroot |
159 | ##seccomp.drop SYSCALLS (see syscalls.txt) | 162 | ##seccomp.drop SYSCALLS (see syscalls.txt) |
160 | #seccomp.block-secondary | 163 | #seccomp.block-secondary |
164 | ##seccomp-error-action log (Only for debugging seccomp issues) | ||
161 | #shell none | 165 | #shell none |
162 | #tracelog | 166 | #tracelog |
163 | # Prefer 'x11 none' instead of 'blacklist /tmp/.X11-unix' if 'net none' is set | 167 | # Prefer 'x11 none' instead of 'blacklist /tmp/.X11-unix' if 'net none' is set |