# generic server profile # it allows /sbin and /usr/sbin directories - this is where servers are installed noblacklist /sbin noblacklist /usr/sbin private private-dev private-tmp seccomp