From 898387577f68ec9b69ae0e5f4d13409ed53a1fdf Mon Sep 17 00:00:00 2001
From: Tad <tad@spotco.us>
Date: Wed, 8 Aug 2018 19:49:32 -0400
Subject: Stop breaking PKI with private-etc

Command: grep "crypto-policies" -iL $(grep "private-etc" -il $(grep "inet,inet6" . -Rl))
+ fixes for #2077
---
 etc/ping.profile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'etc/ping.profile')

diff --git a/etc/ping.profile b/etc/ping.profile
index db5390a41..2b20bf8c9 100644
--- a/etc/ping.profile
+++ b/etc/ping.profile
@@ -40,7 +40,7 @@ private
 #private-bin has mammoth problems with execvp: "No such file or directory"
 private-dev
 # /etc/hosts is required in private-etc; however, just adding it to the list doesn't solve the problem!
-#private-etc resolv.conf,hosts
+#private-etc resolv.conf,hosts,ca-certificates,ssl,pki,crypto-policies
 private-tmp
 
 # memory-deny-write-execute is built using seccomp; nonewprivs will kill it
-- 
cgit v1.2.3-54-g00ecf