programs: blueberry: sandbox
This commit is contained in:
@@ -227,6 +227,16 @@ in
|
|||||||
# blanket.sandbox.whitelistDbus = [ "user" ]; # TODO: untested
|
# blanket.sandbox.whitelistDbus = [ "user" ]; # TODO: untested
|
||||||
blanket.sandbox.whitelistWayland = true;
|
blanket.sandbox.whitelistWayland = true;
|
||||||
|
|
||||||
|
blueberry.sandbox.method = "bwrap";
|
||||||
|
blueberry.sandbox.wrapperType = "wrappedDerivation";
|
||||||
|
blueberry.sandbox.whitelistWayland = true;
|
||||||
|
blueberry.sandbox.extraPaths = [
|
||||||
|
"/dev/rfkill"
|
||||||
|
"/run/dbus"
|
||||||
|
"/sys/class/rfkill"
|
||||||
|
"/sys/devices"
|
||||||
|
];
|
||||||
|
|
||||||
brightnessctl.sandbox.method = "landlock"; # also bwrap, but landlock is more responsive
|
brightnessctl.sandbox.method = "landlock"; # also bwrap, but landlock is more responsive
|
||||||
brightnessctl.sandbox.wrapperType = "wrappedDerivation";
|
brightnessctl.sandbox.wrapperType = "wrappedDerivation";
|
||||||
brightnessctl.sandbox.extraPaths = [
|
brightnessctl.sandbox.extraPaths = [
|
||||||
|
Reference in New Issue
Block a user