programs: usbutils: sandbox

2024-02-16 04:03:47 +00:00 · 2024-02-16 04:03:47 +00:00 · 4e5e4219ec
commit 4e5e4219ec
parent 824dd7c1f5
1 changed files with 7 additions and 0 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@ -567,6 +567,13 @@ in
    unzip.sandbox.autodetectCliPaths = "existingFileOrParent";
    unzip.sandbox.whitelistPwd = true;

+    usbutils.sandbox.method = "bwrap";  # breaks `usbhid-dump`, but `lsusb`, `usb-devices` work
+    usbutils.sandbox.wrapperType = "wrappedDerivation";
+    usbutils.sandbox.extraPaths = [
+      "/sys/devices"
+      "/sys/bus/usb"
+    ];
+
    visidata.sandbox.method = "bwrap";  # TODO:sandbox: untested
    visidata.sandbox.wrapperType = "wrappedDerivation";
    visidata.sandbox.autodetectCliPaths = true;