colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: komikku: fix sandboxing

Browse Source
This commit is contained in:
Colin
2024-02-03 00:52:17 +00:00
parent 2df1b20f02
commit 14b20fd9c2
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
hosts/common/programs/komikku.nix
View File

@@ -3,8 +3,12 @@
sane.programs.komikku = { sane.programs.komikku = {
sandbox.method = "bwrap"; # TODO:sandbox untested sandbox.method = "bwrap"; # TODO:sandbox untested
sandbox.wrapperType = "wrappedDerivation"; sandbox.wrapperType = "wrappedDerivation";
sandbox.whitelistDri = true; #< required
secrets.".local/share/komikku/keyrings/plaintext.keyring" = ../../../secrets/common/komikku_accounts.json.bin; secrets.".local/share/komikku/keyrings/plaintext.keyring" = ../../../secrets/common/komikku_accounts.json.bin;
# downloads end up here, and without the toplevel database komikku doesn't know they exist. # downloads end up here, and without the toplevel database komikku doesn't know they exist.
persist.byStore.plaintext = [ ".local/share/komikku" ]; persist.byStore.plaintext = [
# also writes to ~/.cache/komikku
".local/share/komikku"
];
}; };
} }