rofi-run-command: sandbox

This commit is contained in:
2024-10-29 09:12:11 +00:00
parent 9f620087b5
commit 02deb27c8d

View File

@@ -141,7 +141,11 @@ in
srcRoot = ./.; srcRoot = ./.;
pkgs = [ "sane-open" ]; pkgs = [ "sane-open" ];
}; };
sandbox.method = null; #< trivial script, and all our deps are sandboxed # sandboxing options cribbed from sane-open
sandbox.whitelistDbus = [ "user" ];
sandbox.keepPidsAndProc = true;
sandbox.extraHomePaths = [ ".local/share/applications" ];
sandbox.extraRuntimePaths = [ "sway" ];
suggestedPrograms = [ suggestedPrograms = [
"sane-open" "sane-open"