programs: sandbox oathtools

2024-02-21 00:02:40 +00:00 · 2024-02-21 00:02:40 +00:00 · 5a0760a571
commit 5a0760a571
parent 757ab79724
1 changed files with 4 additions and 0 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@ -693,6 +693,10 @@ in
    ];
    nvme-cli.sandbox.capabilities = [ "sys_rawio" ];

+    # contains only `oathtool`, which i only use for evaluating TOTP codes from CLI/stdin
+    oath-toolkit.sandbox.method = "bwrap";
+    oath-toolkit.sandbox.wrapperType = "wrappedDerivation";
+
    # settings (electron app)
    obsidian.persist.byStore.plaintext = [ ".config/obsidian" ];