colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

sane-wipe: sandbox with bunpen

Browse Source
This commit is contained in:
Colin
2024-09-03 18:30:30 +00:00
parent 71539036fc
commit 0535d97191
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
hosts/common/programs/sane-scripts.nix
View File

@@ -243,7 +243,7 @@ in
"sane-scripts.which".sandbox.method = "bunpen"; "sane-scripts.which".sandbox.method = "bunpen";
"sane-scripts.wipe".sandbox = { "sane-scripts.wipe".sandbox = {
method = "bwrap"; method = "bunpen";
whitelistDbus = [ "user" ]; #< for `secret-tool` whitelistDbus = [ "user" ]; #< for `secret-tool`
whitelistS6 = true; #< for stopping services before wiping whitelistS6 = true; #< for stopping services before wiping
extraHomePaths = [ extraHomePaths = [