# This file is overwritten during software install.
# Persistent customizations should go in a .local file.
include ping-hardened.inc.local
caps.drop all
nonewprivs
noroot
protocol unix,inet,inet6
seccomp
memory-deny-write-execute
restrict-namespaces