colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: waybar: sandbox in a way that works well for moby too

Browse Source
This commit is contained in:
Colin
2024-02-15 13:16:18 +00:00
parent c943442c94
commit 081114da65
1 changed files with 14 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
hosts/common/programs/waybar/default.nix
View File

@@ -50,14 +50,26 @@ in
sandbox.method = "bwrap"; sandbox.method = "bwrap";
sandbox.wrapperType = "wrappedDerivation"; sandbox.wrapperType = "wrappedDerivation";
sandbox.net = "all"; #< to show net connection status and BW sandbox.net = "all"; #< to show net connection status and BW
sandbox.whitelistDbus = [ "user" ]; sandbox.whitelistDbus = [
"user" #< for playerctl/media
"system" #< for modem (on phone)
];
sandbox.whitelistWayland = true; sandbox.whitelistWayland = true;
sandbox.extraRuntimePaths = [ "/" ]; #< needs to talk to sway IPC. TODO: give the sway IPC a predictable name. sandbox.extraRuntimePaths = [
#< needs to talk to sway IPC. TODO: give the sway IPC a predictable name.
"/"
# "sxmo_status" #< only necessary if relying on sxmo's statusbar periodicals service
];
sandbox.extraPaths = [ sandbox.extraPaths = [
# for wifi status on sxmo/phone
"/dev/rfkill"
# for the battery indicator # for the battery indicator
"/sys/class/power_supply" "/sys/class/power_supply"
"/sys/devices" "/sys/devices"
]; ];
sandbox.extraHomePaths = [
".config/sxmo/hooks"
];
fs.".config/waybar/config".symlink.target = fs.".config/waybar/config".symlink.target =
(pkgs.formats.json {}).generate "waybar-config.json" [ (pkgs.formats.json {}).generate "waybar-config.json" [