colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

swaynotificationcenter: sandbox with bunpen

Browse Source
This commit is contained in:
Colin
2024-09-03 18:32:51 +00:00
parent 0535d97191
commit 2e8904fa52
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
hosts/common/programs/swaynotificationcenter/default.nix
View File

@@ -36,9 +36,10 @@ in
"s6-rc" "s6-rc"
]; ];
}; };
sandbox.method = "bwrap"; sandbox.method = "bunpen";
sandbox.whitelistS6 = true; sandbox.whitelistS6 = true;
sandbox.isolatePids = false; #< XXX: not sure why, but swaync segfaults under load without this! sandbox.isolatePids = false; #< XXX: not sure why, but swaync segfaults under load without this!
sandbox.extraPaths = [ "/proc" ];
}; };
sane.programs.swaync-fbcli = { sane.programs.swaync-fbcli = {
@@ -52,9 +53,10 @@ in
"util-linux" "util-linux"
]; ];
}; };
sandbox.method = "bwrap"; sandbox.method = "bunpen";
sandbox.whitelistDbus = [ "user" ]; sandbox.whitelistDbus = [ "user" ];
sandbox.isolatePids = false; # `swaync-fbcli stop` needs to be able to find the corresponding `swaync-fbcli start` process sandbox.isolatePids = false; # `swaync-fbcli stop` needs to be able to find the corresponding `swaync-fbcli start` process
sandbox.extraPaths = [ "/proc" ];
}; };
sane.programs.swaynotificationcenter = { sane.programs.swaynotificationcenter = {
@@ -103,7 +105,7 @@ in
"swaync-service-dispatcher" #< used when toggling buttons "swaync-service-dispatcher" #< used when toggling buttons
]; ];
sandbox.method = "bwrap"; sandbox.method = "bunpen";
sandbox.whitelistAudio = true; sandbox.whitelistAudio = true;
sandbox.whitelistDbus = [ sandbox.whitelistDbus = [
"user" # mpris; portal "user" # mpris; portal