etc/ssh.profile


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

# ssh client
noblacklist ~/.ssh
include /etc/firejail/disable-common.inc
include /etc/firejail/disable-programs.inc

blacklist ${HOME}/.pki/nssdb
blacklist ${HOME}/.lastpass
blacklist ${HOME}/.keepassx
blacklist ${HOME}/.password-store

caps.drop all
seccomp
protocol unix,inet,inet6
netfilter
noroot