config/templates/common.seccomp

   1 2
   2 blacklist
   3 reject_force_umount  # comment this to allow umount -f;  not recommended
   4 [all]
   5 kexec_load errno 1
   6 open_by_handle_at errno 1
   7 init_module errno 1
   8 finit_module errno 1
   9 delete_module errno 1