programs: gimp: sandbox with bwrap
This commit is contained in:
@@ -289,6 +289,19 @@ in
|
|||||||
# TODO: we can populate gh's stuff statically; it even lets us use the same oauth across machines
|
# TODO: we can populate gh's stuff statically; it even lets us use the same oauth across machines
|
||||||
gh.persist.byStore.private = [ ".config/gh" ];
|
gh.persist.byStore.private = [ ".config/gh" ];
|
||||||
|
|
||||||
|
gimp.sandbox.method = "bwrap";
|
||||||
|
gimp.sandbox.wrapperType = "wrappedDerivation";
|
||||||
|
gimp.sandbox.extraHomePaths = [
|
||||||
|
"Pictures"
|
||||||
|
"dev"
|
||||||
|
"ref"
|
||||||
|
"tmp"
|
||||||
|
];
|
||||||
|
gimp.sandbox.extraPaths = [
|
||||||
|
"/mnt/servo-media/Pictures"
|
||||||
|
];
|
||||||
|
gimp.sandbox.autodetectCliPaths = true;
|
||||||
|
|
||||||
gnome-2048.sandbox.method = "bwrap";
|
gnome-2048.sandbox.method = "bwrap";
|
||||||
gnome-2048.sandbox.wrapperType = "wrappedDerivation";
|
gnome-2048.sandbox.wrapperType = "wrappedDerivation";
|
||||||
gnome-2048.persist.byStore.plaintext = [ ".local/share/gnome-2048/scores" ];
|
gnome-2048.persist.byStore.plaintext = [ ".local/share/gnome-2048/scores" ];
|
||||||
|
Reference in New Issue
Block a user