colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

oath-toolkit,sops: sandbox with bunpen

Browse Source
This commit is contained in:
Colin
2024-09-03 17:48:30 +00:00
parent e57e0b9509
commit 45907f23b9
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/common/programs/assorted.nix
View File

@@ -971,7 +971,7 @@ in
nvme-cli.sandbox.capabilities = [ "sys_rawio" ]; nvme-cli.sandbox.capabilities = [ "sys_rawio" ];
# contains only `oathtool`, which i only use for evaluating TOTP codes from CLI/stdin # contains only `oathtool`, which i only use for evaluating TOTP codes from CLI/stdin
oath-toolkit.sandbox.method = "bwrap"; oath-toolkit.sandbox.method = "bunpen";
# settings (electron app) # settings (electron app)
obsidian.persist.byStore.plaintext = [ ".config/obsidian" ]; obsidian.persist.byStore.plaintext = [ ".config/obsidian" ];
@@ -1115,7 +1115,7 @@ in
# TODO: enable dma heaps for more efficient buffer sharing: <https://gitlab.com/postmarketOS/pmaports/-/issues/2789> # TODO: enable dma heaps for more efficient buffer sharing: <https://gitlab.com/postmarketOS/pmaports/-/issues/2789>
snapshot = {}; snapshot = {};
sops.sandbox.method = "bwrap"; sops.sandbox.method = "bunpen";
sops.sandbox.extraHomePaths = [ sops.sandbox.extraHomePaths = [
".config/sops" ".config/sops"
"nixos" "nixos"