From 42523b75a86eb16ccd0baf095b1d40e458517d88 Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Sat, 3 Feb 2024 23:53:34 +0000
Subject: [PATCH] programs: gdb: disable sandboxing

---
 hosts/common/programs/assorted.nix | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index 1519adf7b..18fa6d714 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -274,7 +274,8 @@ in
     gawk.sandbox.wrapperType = "inplace";  # share/gawk libraries refer to /libexec
     gawk.sandbox.autodetectCliPaths = true;
 
-    gdb.sandbox.method = "landlock";  # TODO:sandbox: untested
+    gdb.sandbox.enable = false;  # gdb doesn't sandbox well. i don't know how you could.
+    # gdb.sandbox.method = "landlock";  # permission denied when trying to attach, even as root
     gdb.sandbox.wrapperType = "wrappedDerivation";
     gdb.sandbox.autodetectCliPaths = true;