diff --git a/hosts/common/programs/pactl.nix b/hosts/common/programs/pactl.nix
index 287711515..0bd8f176d 100644
--- a/hosts/common/programs/pactl.nix
+++ b/hosts/common/programs/pactl.nix
@@ -2,5 +2,7 @@
 {
   sane.programs.pactl = {
     packageUnwrapped = pkgs.linkIntoOwnPackage pkgs.pulseaudio "bin/pactl";
+    sandbox.method = "bwrap";
+    sandbox.whitelistAudio = true;
   };
 }