diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index a871f4fcb..c34318a2d 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -598,7 +598,7 @@ in
       withWebkit = false;
     });
 
-    forkstat.sandbox.method = "landlock";  #< doesn't seem to support bwrap
+    forkstat.sandbox.method = "landlock";  #< doesn't support bwrap unless i do `--sanebox-keep-namespace pid --sanebox-keep-namespace net`
     forkstat.sandbox.isolatePids = false;
     forkstat.sandbox.extraPaths = [
       "/proc"