programs: netcat: sandbox

2024-02-16 15:08:42 +00:00
parent 1d646459ab
commit 198029f95f
1 changed files with 4 additions and 0 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -544,6 +544,10 @@ in
    nano.sandbox.wrapperType = "wrappedDerivation";
    nano.sandbox.autodetectCliPaths = "existingFileOrParent";

+    netcat.sandbox.method = "landlock";
+    netcat.sandbox.wrapperType = "wrappedDerivation";
+    netcat.sandbox.net = "all";
+
    nethogs.sandbox.method = "capshonly";  # *partially* works under landlock w/ full access to /
    nethogs.sandbox.wrapperType = "wrappedDerivation";
    nethogs.sandbox.capabilities = [ "net_admin" "net_raw" ];