/bin/login oX {
	/var/mail
	/var/log/btmp
	/proc
	/home
	/root
	/var/run/utmp rw
	/var/log/wtmp w
	/var/log/lastlog rw
	/var/log/faillog rw
	/usr/share/zoneinfo r
	/lib rx
	/etc r
	/etc/grsec h
	/dev/tty1 w
	/dev/tty2 w
	/dev/tty3 w
	/dev/tty4 w
	/dev/tty5 w
	/dev/log rw
	/bin/bash x
	/bin/login x
	/ h

	-CAP_ALL
	+CAP_CHOWN
	+CAP_FOWNER
	+CAP_FSETID
	+CAP_SETGID
	+CAP_SETUID

	RES_CRASH 1 10m

	connect {
		disabled
	}

	bind {
		disabled
	}
}
