rofi-run-command: sandbox

2024-10-29 09:12:11 +00:00
parent 9f620087b5
commit 02deb27c8d
1 changed files with 5 additions and 1 deletions
--- a/hosts/common/programs/rofi/default.nix
+++ b/hosts/common/programs/rofi/default.nix
@@ -141,7 +141,11 @@ in
      srcRoot = ./.;
      pkgs = [ "sane-open" ];
    };
-    sandbox.method = null;  #< trivial script, and all our deps are sandboxed
+    # sandboxing options cribbed from sane-open
+    sandbox.whitelistDbus = [ "user" ];
+    sandbox.keepPidsAndProc = true;
+    sandbox.extraHomePaths = [ ".local/share/applications" ];
+    sandbox.extraRuntimePaths = [ "sway" ];

    suggestedPrograms = [
      "sane-open"