X-Git-Url: https://glassweightruler.freedombox.rocks/gitweb/waydroid.git/blobdiff_plain/eef036b3f814a9fc4869ebfe6c9d2bd51fa19f26..5159f6583109f402e3b51c528c81219bb6821110:/data/configs/config_2

diff --git a/data/configs/config_2 b/data/configs/config_2
index b397c02..34537ec 100644
--- a/data/configs/config_2
+++ b/data/configs/config_2
@@ -6,6 +6,11 @@ lxc.arch = LXCARCH
 lxc.autodev = 0
 # lxc.autodev.tmpfs.size = 25000000
 lxc.apparmor.profile = unconfined
+lxc.seccomp.profile = /var/lib/waydroid/lxc/waydroid/waydroid.seccomp
+lxc.seccomp.allow_nesting = 1
+
+lxc.cap.keep = audit_control sys_nice wake_alarm setpcap setgid setuid sys_ptrace sys_admin wake_alarm block_suspend sys_time net_admin net_raw net_bind_service kill dac_override dac_read_search fsetid mknod syslog chown sys_resource fowner sys_module ipc_lock sys_chroot
+lxc.no_new_privs = 1
 
 lxc.init.cmd = /init
 
@@ -19,6 +24,7 @@ lxc.net.0.hwaddr = 00:16:3e:f9:d3:03
 lxc.net.0.mtu = 1500
 
 lxc.console.path = none
+lxc.pty.max = 10
 
 lxc.include = /var/lib/waydroid/lxc/waydroid/config_nodes