nix-files/hosts/common/programs/evince.nix

{ ... }:
{
  sane.programs.evince = {
    sandbox.method = "bwrap";
    sandbox.autodetectCliPaths = true;
    sandbox.whitelistWayland = true;

    mime.associations."application/pdf" = "org.gnome.Evince.desktop";
  };
}
programs: factor out a `sane.programs.<foo>.mime` schema 2023-07-15 08:44:18 +00:00			`{ ... }:`
			`{`
evince: sandbox with firejail 2024-01-22 10:20:29 +00:00			`sane.programs.evince = {`
evince: port sandbox from firejail to bwrap 2024-01-23 16:44:13 +00:00			`sandbox.method = "bwrap";`
programs: introduce and use "autodetectCliPaths" nix config 2024-01-27 17:19:48 +00:00			`sandbox.autodetectCliPaths = true;`
programs: sandboxing: only permit wayland socket access to those specific apps which require it 2024-02-14 01:49:49 +00:00			`sandbox.whitelistWayland = true;`

evince: sandbox with firejail 2024-01-22 10:20:29 +00:00			`mime.associations."application/pdf" = "org.gnome.Evince.desktop";`
			`};`
programs: factor out a `sane.programs.<foo>.mime` schema 2023-07-15 08:44:18 +00:00			`}`