/*
 * Use it if your default rule has many restrictions
 *
 * WARNING: untested
 */

/sbin/init {
	uid 0
	gid 0
	groups no

	chkchroot no
	chksetuid no
	clrenv no
	rootdir default

	cap default		// does not modify capabilities after execve
	uidcap default		// restores standard behavior of set*uids

	exec allow all
}
