calls: sandbox

2024-05-18 06:52:53 +00:00 · 2024-05-18 06:52:53 +00:00 · 278631b59e
commit 278631b59e
parent 4d09cce1aa
1 changed files with 6 additions and 0 deletions
--- a/hosts/common/programs/calls.nix
+++ b/hosts/common/programs/calls.nix
@ -41,6 +41,12 @@ in
      ];
    });

+    sandbox.method = "bwrap";
+    sandbox.net = "clearnet";
+    sandbox.whitelistAudio = true;
+    sandbox.whitelistDbus = [ "user" ];  # necessary for secrets, at the minimum
+    sandbox.whitelistWayland = true;
+
    persist.byStore.private = [
      # ".cache/folks"      # contact avatars?
      # ".config/calls"