colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

btrfs-progs: fix sandboxing to be compat with "btrfs replace"

Browse Source
This commit is contained in:
Colin
2025-05-15 04:11:18 +00:00
parent 2701b484e5
commit 471341447e
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
hosts/common/programs/btrfs-progs.nix
View File

@@ -20,7 +20,10 @@ in
]; ];
sandbox.tryKeepUsers = true; sandbox.tryKeepUsers = true;
sandbox.keepPids = true; # required for `sudo btrfs scrub start` sandbox.keepPids = true; # required for `sudo btrfs scrub start`
sandbox.capabilities = [ "sys_admin" ]; # for `btrfs scrub` sandbox.capabilities = [
"dac_read_search" # for `btrfs replace`
"sys_admin" # for `btrfs scrub`
];
}; };
# TODO: service sandboxing # TODO: service sandboxing