colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs/assorted: remove explicit (and extraneous) sandbox.method = "bunpen" declarations

Browse Source
This commit is contained in:
Colin
2024-09-21 23:35:06 +00:00
parent 4868fbb82c
commit 31615340a7
128 changed files with 9 additions and 246 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
modules/persist/stores/ephemeral/default.nix
View File

@@ -19,7 +19,6 @@ lib.mkIf config.sane.persist.enable
};
suggestedPrograms = [ "gocryptfs" ];
sandbox.method = "bunpen";
sandbox.autodetectCliPaths = "existing";
sandbox.capabilities = [
"sys_admin" #< XXX: this is required to keep user mappings; for single-user it's actually not necessary if using fuse3-sane with -o pass_fuse_fd

2
modules/persist/stores/private/default.nix
View File

@@ -17,7 +17,6 @@ lib.mkIf config.sane.persist.enable
"inotify-tools"
];
};
sandbox.method = "bunpen";
sandbox.autodetectCliPaths = "parent";
# XXX: if provisioning fails, try `sudo chown root:root /nix/persist/private/gocryptfs.*`
# else re-enable the below:
@@ -30,7 +29,6 @@ lib.mkIf config.sane.persist.enable
srcRoot = ./.;
pkgs = [ "gocryptfs" ];
};
sandbox.method = "bunpen";
sandbox.autodetectCliPaths = "existing";
sandbox.capabilities = [
"sys_admin" #< XXX: this is required to keep user mappings; for single-user it's actually not necessary if using fuse3-sane with -o pass_fuse_fd