programs: komikku: fix sandboxing

2024-02-03 00:52:17 +00:00
parent 2df1b20f02
commit 14b20fd9c2
1 changed files with 5 additions and 1 deletions
--- a/hosts/common/programs/komikku.nix
+++ b/hosts/common/programs/komikku.nix
@@ -3,8 +3,12 @@
  sane.programs.komikku = {
    sandbox.method = "bwrap";  # TODO:sandbox untested
    sandbox.wrapperType = "wrappedDerivation";
+    sandbox.whitelistDri = true;  #< required
    secrets.".local/share/komikku/keyrings/plaintext.keyring" = ../../../secrets/common/komikku_accounts.json.bin;
    # downloads end up here, and without the toplevel database komikku doesn't know they exist.
-    persist.byStore.plaintext = [ ".local/share/komikku" ];
+    persist.byStore.plaintext = [
+      # also writes to ~/.cache/komikku
+      ".local/share/komikku"
+    ];
  };
 }