colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

wirelesstools: sandbox with bunpen (only minimally tested)

Browse Source
This commit is contained in:
Colin
2024-09-11 02:04:59 +00:00
parent 0128826a42
commit 2c76497d34
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
hosts/common/programs/assorted.nix
View File

@@ -1261,9 +1261,10 @@ in
wireguard-tools.sandbox.tryKeepUsers = true;
# provides `iwconfig`, `iwlist`, `iwpriv`, ...
wirelesstools.sandbox.method = "landlock";
wirelesstools.sandbox.method = "bunpen";
wirelesstools.sandbox.net = "all";
wirelesstools.sandbox.capabilities = [ "net_admin" ];
wirelesstools.sandbox.tryKeepUsers = true;
wl-clipboard.sandbox.method = "bunpen";
wl-clipboard.sandbox.whitelistWayland = true;