programs: dig: sandbox with bwrap

2024-02-14 13:47:44 +00:00
parent 7d22a5466f
commit 29d638c68b
1 changed files with 4 additions and 0 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -249,6 +249,10 @@ in
    delfin.sandbox.net = "clearnet";
    delfin.persist.byStore.private = [ ".config/delfin" ];

+    dig.sandbox.method = "bwrap";
+    dig.sandbox.wrapperType = "wrappedDerivation";
+    dig.sandbox.net = "all";
+
    # creds, but also 200 MB of node modules, etc
    discord.sandbox.method = "bwrap";
    discord.sandbox.wrapperType = "inplace";  #< /opt-style packaging