---

# --- БЛОКИРОВКА СВЯЗИ И ИНТЕГРАЦИИ С ХОСТОМ ---
monitor_control.restrict_backdoor = "TRUE"
rpc.filter.enable = "TRUE"
isolation.tools.copy.disable = "TRUE"
isolation.tools.paste.disable = "TRUE"
isolation.tools.dnd.disable = "TRUE"
isolation.tools.setGUIoptions.enable = "FALSE"
isolation.tools.ghi.launchgui.disable = "TRUE"
isolation.tools.hgfsServerSetVersions.disable = "TRUE"
isolation.tools.memSchedFakeSample.disable = "TRUE"

# --- БЛОКИРОВКА ИЗМЕНЕНИЯ УСТРОЙСТВ ВИРУСАМИ ---
isolation.device.connectable.disable = "TRUE"
isolation.device.edit.disable = "TRUE"

# --- ЗАЩИТА ПАМЯТИ И ОТ АТАК НА ПРОЦЕССОР (SIDE-CHANNEL) ---
isolation.tools.getPtrLocation.disable = "TRUE"
isolation.tools.setPtrLocation.disable = "TRUE"
isolation.tools.getVersion.disable = "TRUE"
isolation.tools.setVersion.disable = "TRUE"

# --- БЕЗОПАСНОСТЬ ЗАГРУЗКИ И ОТКЛЮЧЕНИЕ ЛОГОВ ---
uefi.secureBoot.enabled = "TRUE"
log.keepSecs = "0"
logging = "FALSE"