From 9e3ba319be6b9546d7e8f450ca419ee2f3f4040b Mon Sep 17 00:00:00 2001 From: Tad Date: Mon, 7 Aug 2017 01:22:08 -0400 Subject: Unify all profiles --- etc/ssh.profile | 22 ++++++++++++---------- 1 file changed, 12 insertions(+), 10 deletions(-) (limited to 'etc/ssh.profile') diff --git a/etc/ssh.profile b/etc/ssh.profile index 466abdc88..0f9950a81 100644 --- a/etc/ssh.profile +++ b/etc/ssh.profile @@ -1,19 +1,18 @@ +# Firejail profile for ssh +# This file is overwritten after every install/update quiet -# Persistent global definitions go here -include /etc/firejail/globals.local - -# This file is overwritten during software install. -# Persistent customizations should go in a .local file. +# Persistent local customizations include /etc/firejail/ssh.local +# Persistent global definitions +include /etc/firejail/globals.local -# ssh client -noblacklist ~/.ssh -noblacklist /tmp/ssh-* noblacklist /etc/ssh +noblacklist /tmp/ssh-* +noblacklist ~/.ssh include /etc/firejail/disable-common.inc -include /etc/firejail/disable-programs.inc include /etc/firejail/disable-passwdmgr.inc +include /etc/firejail/disable-programs.inc caps.drop all ipc-namespace @@ -29,8 +28,11 @@ shell none tracelog private-dev -#private-tmp #Breaks when exiting +# private-tmp # Breaks when exiting memory-deny-write-execute noexec ${HOME} noexec /tmp + +# CLOBBERED COMMENTS +# ssh client -- cgit v1.2.3-70-g09d2