python3-repl: sandbox with bunpen

2024-09-03 03:02:24 +00:00
parent d20359fc1d
commit 34aad6f74c
1 changed files with 2 additions and 2 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -1050,10 +1050,10 @@ in
      requests
      unidecode
    ]);
-    python3-repl.sandbox.method = "bwrap";
+    python3-repl.sandbox.method = "bunpen";
    python3-repl.sandbox.net = "clearnet";
    python3-repl.sandbox.extraHomePaths = [
-      "/"
+      "/"  #< this is 'safe' because with don't expose .persist/private, so no .ssh/id_ed25519
      ".persist/plaintext"
    ];