/*
 * Use it if your default rule has many restrictions
 *
 * WARNING: untested
 */

/sbin/init {
	uid 0
	gid 0
	groups no

	chroot no
	root default

	cap default		// does not modify capabilities after execve
	uidcap default		// restores standard behavior of set*uids

	exec allow all
}
