colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: disable sandboxing for strace and screen

Browse Source
This commit is contained in:
Colin
2024-02-16 04:51:52 +00:00
parent 9d252d095e
commit 28aaeb051f
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/common/programs/assorted.nix
View File

@@ -494,6 +494,8 @@ in
rsync.sandbox.net = "clearnet"; rsync.sandbox.net = "clearnet";
rsync.sandbox.autodetectCliPaths = "existingFileOrParent"; rsync.sandbox.autodetectCliPaths = "existingFileOrParent";
screen.sandbox.enable = false; #< tty; needs to run anything
sequoia.sandbox.method = "bwrap"; # TODO:sandbox: untested sequoia.sandbox.method = "bwrap"; # TODO:sandbox: untested
sequoia.sandbox.wrapperType = "wrappedDerivation"; # slow to build sequoia.sandbox.wrapperType = "wrappedDerivation"; # slow to build
sequoia.sandbox.whitelistPwd = true; sequoia.sandbox.whitelistPwd = true;
@@ -539,6 +541,8 @@ in
speedtest-cli.sandbox.wrapperType = "wrappedDerivation"; speedtest-cli.sandbox.wrapperType = "wrappedDerivation";
speedtest-cli.sandbox.net = "all"; speedtest-cli.sandbox.net = "all";
strace.sandbox.enable = false; #< needs to `exec` its args, and therefore support *anything*
subversion.sandbox.method = "bwrap"; subversion.sandbox.method = "bwrap";
subversion.sandbox.wrapperType = "wrappedDerivation"; subversion.sandbox.wrapperType = "wrappedDerivation";
subversion.sandbox.net = "clearnet"; subversion.sandbox.net = "clearnet";