diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index d94306fc..5b3e5873 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -494,6 +494,13 @@ in
     # settings (electron app)
     obsidian.persist.byStore.plaintext = [ ".config/obsidian" ];
 
+    parted.sandbox.method = "landlock";
+    parted.sandbox.wrapperType = "wrappedDerivation";
+    parted.sandbox.extraPaths = [
+      "/dev"
+    ];
+    parted.sandbox.autodetectCliPaths = "existing";  #< sometimes you'll use parted on a device file.
+
     pavucontrol.sandbox.method = "bwrap";
     pavucontrol.sandbox.wrapperType = "wrappedDerivation";
     pavucontrol.sandbox.whitelistAudio = true;