bunpen: sandbox with bunpen

2024-09-03 03:56:11 +00:00
parent 22a5bcc259
commit 0df02b5ba3
1 changed files with 2 additions and 1 deletions
--- a/hosts/common/programs/captree.nix
+++ b/hosts/common/programs/captree.nix
@@ -2,7 +2,8 @@
 {
  sane.programs.captree = {
    packageUnwrapped = pkgs.linkBinIntoOwnPackage pkgs.libcap-with-captree "captree";
-    sandbox.method = "bwrap";
+    sandbox.method = "bunpen";
    sandbox.isolatePids = false;
+    sandbox.extraPaths = [ "/proc" ];
  };
 }