diff --git a/etc/profile-m-z/ssh.profile b/etc/profile-m-z/ssh.profile index 1c4d85ea0b..018e052300 100644 --- a/etc/profile-m-z/ssh.profile +++ b/etc/profile-m-z/ssh.profile @@ -19,11 +19,11 @@ include disable-exec.inc include disable-programs.inc whitelist ${RUNUSER}/gcr/ssh -whitelist ${RUNUSER}/gnupg/S.gpg-agent.ssh # default gpg homedir setup whitelist ${RUNUSER}/gnupg/*/S.gpg-agent.ssh # custom gpg homedir setup +whitelist ${RUNUSER}/gnupg/S.gpg-agent.ssh # default gpg homedir setup whitelist ${RUNUSER}/keyring/ssh -include whitelist-usr-share-common.inc include whitelist-runuser-common.inc +include whitelist-usr-share-common.inc apparmor caps.drop all