programs: swaylock: *partially* sandbox with capsh
This commit is contained in:
parent
f11e443678
commit
3eb47a9a8d
|
@ -447,7 +447,8 @@ in
|
||||||
superTux.sandbox.whitelistWayland = true;
|
superTux.sandbox.whitelistWayland = true;
|
||||||
superTux.persist.byStore.plaintext = [ ".local/share/supertux2" ];
|
superTux.persist.byStore.plaintext = [ ".local/share/supertux2" ];
|
||||||
|
|
||||||
swaylock.sandbox.enable = false; #< neither landlock nor bwrap works. pam_authenticate failed: invalid credentials. does it rely on SUID?
|
swaylock.sandbox.method = "capshonly"; #< neither landlock nor bwrap works. pam_authenticate failed: invalid credentials. does it rely on SUID?
|
||||||
|
swaylock.sandbox.wrapperType = "wrappedDerivation";
|
||||||
|
|
||||||
tdesktop.persist.byStore.private = [ ".local/share/TelegramDesktop" ];
|
tdesktop.persist.byStore.private = [ ".local/share/TelegramDesktop" ];
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue
Block a user