programs: loupe: sandbox with bwrap

2024-02-06 06:05:32 +00:00
parent 97d50629e9
commit 5fbf66fb15
1 changed files with 14 additions and 0 deletions
--- a/hosts/common/programs/loupe.nix
+++ b/hosts/common/programs/loupe.nix
@@ -1,6 +1,20 @@
 { pkgs, ... }:
 {
  sane.programs.loupe = {
+    sandbox.method = "bwrap";
+    sandbox.wrapperType = "wrappedDerivation";
+    sandbox.extraHomePaths = [
+      "Pictures"
+      "Videos"
+      "dev"
+      "records"
+      "ref"
+      "tmp"
+    ];
+    sandbox.extraPaths = [
+      "/mnt/servo/media/Pictures"
+      "/mnt/servo/media/Videos"
+    ];
    mime.associations = {
      "image/gif" = "org.gnome.Loupe.desktop";
      "image/heif" = "org.gnome.Loupe.desktop";  # apple codec