programs: blanket: sandbox with bwrap

2024-02-05 18:26:21 +00:00 · 2024-02-05 18:26:21 +00:00 · 12846732b9
commit 12846732b9
parent e84079e84c
1 changed files with 3 additions and 0 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@ -221,6 +221,9 @@ in


    # INDIVIDUAL PACKAGE DEFINITIONS
+    blanket.sandbox.method = "bwrap";
+    blanket.sandbox.wrapperType = "wrappedDerivation";
+
    "cacert.unbundled".sandbox.enable = false;

    cargo.persist.byStore.plaintext = [ ".cargo" ];