programs: soundconverter: sandbox with bwrap

2024-02-16 03:51:23 +00:00
parent 2b66ffc58a
commit 30507c3564
1 changed files with 14 additions and 0 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -491,6 +491,20 @@ in
      "knowledge"
    ];

+    soundconverter.sandbox.method = "bwrap";
+    soundconverter.sandbox.wrapperType = "wrappedDerivation";
+    soundconverter.sandbox.whitelistWayland = true;
+    soundconverter.sandbox.extraHomePaths = [
+      "Music"
+      "tmp"
+      "use"
+    ];
+    soundconverter.sandbox.extraPaths = [
+      "/mnt/servo/media/Music"
+      "/mnt/servo/media/games"
+    ];
+    soundconverter.sandbox.autodetectCliPaths = "existingFileOrParent";
+
    space-cadet-pinball.persist.byStore.plaintext = [ ".local/share/SpaceCadetPinball" ];

    speedtest-cli.sandbox.method = "bwrap";