wirelesstools: sandbox with bunpen (only minimally tested)
This commit is contained in:
@@ -1261,9 +1261,10 @@ in
|
|||||||
wireguard-tools.sandbox.tryKeepUsers = true;
|
wireguard-tools.sandbox.tryKeepUsers = true;
|
||||||
|
|
||||||
# provides `iwconfig`, `iwlist`, `iwpriv`, ...
|
# provides `iwconfig`, `iwlist`, `iwpriv`, ...
|
||||||
wirelesstools.sandbox.method = "landlock";
|
wirelesstools.sandbox.method = "bunpen";
|
||||||
wirelesstools.sandbox.net = "all";
|
wirelesstools.sandbox.net = "all";
|
||||||
wirelesstools.sandbox.capabilities = [ "net_admin" ];
|
wirelesstools.sandbox.capabilities = [ "net_admin" ];
|
||||||
|
wirelesstools.sandbox.tryKeepUsers = true;
|
||||||
|
|
||||||
wl-clipboard.sandbox.method = "bunpen";
|
wl-clipboard.sandbox.method = "bunpen";
|
||||||
wl-clipboard.sandbox.whitelistWayland = true;
|
wl-clipboard.sandbox.whitelistWayland = true;
|
||||||
|
Reference in New Issue
Block a user