programs: gimp: sandbox with bwrap

This commit is contained in:
Colin 2024-02-05 20:53:05 +00:00
parent cab346f3ad
commit 2c0e93826d

View File

@ -289,6 +289,19 @@ in
# TODO: we can populate gh's stuff statically; it even lets us use the same oauth across machines
gh.persist.byStore.private = [ ".config/gh" ];
gimp.sandbox.method = "bwrap";
gimp.sandbox.wrapperType = "wrappedDerivation";
gimp.sandbox.extraHomePaths = [
"Pictures"
"dev"
"ref"
"tmp"
];
gimp.sandbox.extraPaths = [
"/mnt/servo-media/Pictures"
];
gimp.sandbox.autodetectCliPaths = true;
gnome-2048.sandbox.method = "bwrap";
gnome-2048.sandbox.wrapperType = "wrappedDerivation";
gnome-2048.persist.byStore.plaintext = [ ".local/share/gnome-2048/scores" ];