colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

cozy: sandbox with bwrap

Browse Source
This commit is contained in:
Colin
2024-01-27 13:11:22 +00:00
parent a06c81643c
commit 1bde38bf72
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
hosts/common/programs/cozy.nix
View File

@@ -2,6 +2,14 @@
{ {
sane.programs.cozy = { sane.programs.cozy = {
sandbox.method = "bwrap"; # landlock gives: _multiprocessing.SemLock: Permission Denied
sandbox.embedProfile = true;
sandbox.extraHomePaths = [
"Books"
];
sandbox.extraPaths = [
"/mnt/servo-media/Books"
];
# cozy uses a sqlite db for its config and exposes no CLI options other than --help and --debug # cozy uses a sqlite db for its config and exposes no CLI options other than --help and --debug
persist.byStore.plaintext = [ persist.byStore.plaintext = [
".local/share/cozy" # sqlite db (config & index?) ".local/share/cozy" # sqlite db (config & index?)