powertop: sandbox with bunpen

2024-09-07 19:59:59 +00:00
parent 7b5508c91d
commit 5742101191
1 changed files with 2 additions and 1 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -978,8 +978,9 @@ in

    "perlPackages.FileMimeInfo" = {};

-    powertop.sandbox.method = "landlock";
+    powertop.sandbox.method = "bunpen";
    powertop.sandbox.capabilities = [ "ipc_lock" "sys_admin" ];
+    powertop.sandbox.tryKeepUsers = true;
    powertop.sandbox.extraPaths = [
      "/proc"
      "/sys/class"