diff --git a/hosts/common/programs/less.nix b/hosts/common/programs/less.nix
index c3e26dd2..35d68f23 100644
--- a/hosts/common/programs/less.nix
+++ b/hosts/common/programs/less.nix
@@ -1,6 +1,8 @@
 { ... }:
 {
   sane.programs.less = {
+    sandbox.method = "bwrap";
+    sandbox.autodetectCliPaths = "existingFile";
     env.PAGER = "less";
   };
 }