firejail/etc/inc/allow-ssh.inc
RedRampage b2d5d173cb profiles: Add socket-activated ssh-agent socket
Added another default ssh-agent socket path, that is used in Debian for
socket-activated agent.
2025-12-02 00:15:52 +03:00

20 lines
584 B
Text

# This file is overwritten during software install.
# Persistent customizations should go in a .local file.
include allow-ssh.local
noblacklist ${HOME}/.ssh
noblacklist /etc/ssh
noblacklist /etc/ssh/ssh_config
noblacklist /etc/ssh/ssh_config.d
noblacklist /etc/ssh/ssh_revoked_hosts # RevokedHostKeys on Gentoo
noblacklist ${PATH}/ssh*
noblacklist ${RUNUSER}/openssh_agent
noblacklist /tmp/ssh-*
# Arch Linux and derivatives
noblacklist /usr/lib/ssh
# Debian/Ubuntu and derivatives
noblacklist /usr/lib/openssh
# Fedora and derivatives
noblacklist /usr/libexec/openssh
keep-dev-tpm