satellite: sandbox

2024-07-05 23:27:51 +00:00
parent 8f46bd5497
commit 4a8a5b309e
1 changed files with 7 additions and 1 deletions
--- a/hosts/common/programs/satellite.nix
+++ b/hosts/common/programs/satellite.nix
@@ -49,5 +49,11 @@
 #
 { ... }:
 {
-  sane.programs.satellite = {};
+  sane.programs.satellite = {
+    sandbox.method = "bwrap";
+    sandbox.whitelistDbus = [
+      "system"  #< reads NMEA data via ModemManager
+    ];
+    sandbox.whitelistWayland = true;
+  };
 }