colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

swaylock: sandbox with bunpen

Browse Source
This commit is contained in:
Colin
2024-09-03 16:04:18 +00:00
parent 181bc57a8a
commit 5e38ebef4b
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/common/programs/swaylock.nix
View File

@@ -1,4 +1,4 @@
{ config, lib, pkgs, ... }: { config, lib, ... }:
let let
cfg = config.sane.programs.swaylock; cfg = config.sane.programs.swaylock;
in in
@@ -30,7 +30,7 @@ in
# ]; # ];
# }); # });
sandbox.method = "bwrap"; sandbox.method = "bunpen";
sandbox.extraPaths = [ sandbox.extraPaths = [
# N.B.: we need to be able to follow /etc/shadow to wherever it's symlinked. # N.B.: we need to be able to follow /etc/shadow to wherever it's symlinked.
# swaylock seems (?) to offload password checking to pam's `unix_chkpwd`, # swaylock seems (?) to offload password checking to pam's `unix_chkpwd`,