diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index 474587c13..aa6f3392b 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -1049,7 +1049,7 @@ in
     qemu.sandbox.enable = false;  #< it's a launcher
     qemu.buildCost = 2;
 
-    rsync.sandbox.method = "bwrap";
+    rsync.sandbox.method = "bunpen";
     rsync.sandbox.net = "clearnet";
     rsync.sandbox.autodetectCliPaths = "existingOrParent";