rofi-run-command: sandbox
This commit is contained in:
@@ -141,7 +141,11 @@ in
|
|||||||
srcRoot = ./.;
|
srcRoot = ./.;
|
||||||
pkgs = [ "sane-open" ];
|
pkgs = [ "sane-open" ];
|
||||||
};
|
};
|
||||||
sandbox.method = null; #< trivial script, and all our deps are sandboxed
|
# sandboxing options cribbed from sane-open
|
||||||
|
sandbox.whitelistDbus = [ "user" ];
|
||||||
|
sandbox.keepPidsAndProc = true;
|
||||||
|
sandbox.extraHomePaths = [ ".local/share/applications" ];
|
||||||
|
sandbox.extraRuntimePaths = [ "sway" ];
|
||||||
|
|
||||||
suggestedPrograms = [
|
suggestedPrograms = [
|
||||||
"sane-open"
|
"sane-open"
|
||||||
|
Reference in New Issue
Block a user