colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

sane-scripts.stop-all-servo: sandbox (correctly, i hope)

Browse Source
This commit is contained in:
Colin 2024-07-04 12:44:28 +00:00
parent 24ed242bac
commit 0fd8dc2a01
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
hosts/common/programs/sane-scripts.nix
View File

@ -206,7 +206,13 @@ in
];
};
"sane-scripts.stop-all-servo" = {};
"sane-scripts.stop-all-servo".sandbox = {
method = "bwrap";
extraPaths = [
"/run/dbus"
"/run/systemd"
];
};
# if `tee` isn't trustworthy we have bigger problems
"sane-scripts.sudo-redirect".sandbox.enable = false;