forkstat: document sandbox limitations

2024-09-03 02:54:27 +00:00
parent 9050d8979e
commit 2d5cb84eef
1 changed files with 1 additions and 1 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -598,7 +598,7 @@ in
      withWebkit = false;
    });

-    forkstat.sandbox.method = "landlock";  #< doesn't seem to support bwrap
+    forkstat.sandbox.method = "landlock";  #< doesn't support bwrap unless i do `--sanebox-keep-namespace pid --sanebox-keep-namespace net`
    forkstat.sandbox.isolatePids = false;
    forkstat.sandbox.extraPaths = [
      "/proc"