gst-device-monitor: sandbox

2024-07-04 19:49:28 +00:00
parent 828d4fcc9c
commit 46eab8f4e2
1 changed files with 9 additions and 0 deletions
--- a/hosts/common/programs/gst-device-monitor.nix
+++ b/hosts/common/programs/gst-device-monitor.nix
@@ -20,5 +20,14 @@
        pkgs.pipewire  #< required for Video/Source (video4linux)
      ];
    });
+
+    sandbox.method = "bwrap";
+    sandbox.whitelistAudio = true;
+    sandbox.extraPaths = [
+      "/dev"  # tried, but failed to narrow this down (moby)
+      "/run/udev/data"
+      "/sys/class/video4linux"
+      "/sys/devices"
+    ];
  };
 }