programs: fuzzel: sandbox

This commit is contained in:
Colin 2024-02-06 02:34:46 +00:00
parent 2495200b67
commit 5ff7bf0c69

View File

@ -276,6 +276,10 @@ in
withWebkit = false;
};
fuzzel.sandbox.method = "bwrap"; #< landlock nearly works, but unable to open ~/.cache
fuzzel.sandbox.wrapperType = "wrappedDerivation";
fuzzel.persist.byStore.private = [ ".cache/fuzzel" ]; #< this is a file of recent selections
gawk.sandbox.method = "bwrap"; # TODO:sandbox: untested
gawk.sandbox.wrapperType = "inplace"; # share/gawk libraries refer to /libexec
gawk.sandbox.autodetectCliPaths = true;