colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

ethtool: sandbox with bwrap

Browse Source 
it doesn't *quite* sandbox with bunpen: i lose Wake-on-lan info... not sure why
This commit is contained in:
Colin
2024-09-07 21:19:24 +00:00
parent 135af51f37
commit 3fb566a3fd
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
hosts/common/programs/assorted.nix
View File

@@ -540,8 +540,9 @@ in
# TODO: package [smile](https://github.com/mijorus/smile) for probably a better mobile experience. # TODO: package [smile](https://github.com/mijorus/smile) for probably a better mobile experience.
emote.persist.byStore.plaintext = [ ".local/share/Emote" ]; emote.persist.byStore.plaintext = [ ".local/share/Emote" ];
ethtool.sandbox.method = "landlock"; ethtool.sandbox.method = "bwrap";
ethtool.sandbox.capabilities = [ "net_admin" ]; ethtool.sandbox.capabilities = [ "net_admin" ];
ethtool.sandbox.net = "all";
evtest.sandbox.method = "bunpen"; evtest.sandbox.method = "bunpen";
evtest.sandbox.autodetectCliPaths = "existingFile"; # `evtest /dev/foo` to monitor events for a specific device evtest.sandbox.autodetectCliPaths = "existingFile"; # `evtest /dev/foo` to monitor events for a specific device