colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: swaylock: *partially* sandbox with capsh

Browse Source
This commit is contained in:
Colin 2024-02-14 05:46:36 +00:00
parent f11e443678
commit 3eb47a9a8d
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
hosts/common/programs/assorted.nix
View File

@ -447,7 +447,8 @@ in
superTux.sandbox.whitelistWayland = true;
superTux.persist.byStore.plaintext = [ ".local/share/supertux2" ];
swaylock.sandbox.enable = false; #< neither landlock nor bwrap works. pam_authenticate failed: invalid credentials. does it rely on SUID?
swaylock.sandbox.method = "capshonly"; #< neither landlock nor bwrap works. pam_authenticate failed: invalid credentials. does it rely on SUID?
swaylock.sandbox.wrapperType = "wrappedDerivation";
tdesktop.persist.byStore.private = [ ".local/share/TelegramDesktop" ];