hping: sandbox with bunpen

2024-09-07 20:41:37 +00:00
parent 9f4c40fe01
commit 028f56f70b
1 changed files with 2 additions and 1 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -678,10 +678,11 @@ in
      "dconf"  #< silences "unable to create file '/run/user/colin/dconf/user': Permission denied.  dconf will not work properly."
    ];

-    hping.sandbox.method = "landlock";
+    hping.sandbox.method = "bunpen";
    hping.sandbox.net = "all";
    hping.sandbox.capabilities = [ "net_raw" ];
    hping.sandbox.autodetectCliPaths = "existingFile";  # for sending packet data from file
+    hping.sandbox.tryKeepUsers = true;

    # seahorse: dump gnome-keyring secrets.
    seahorse.buildCost = 1;