sane-secrets-unlock: sandbox with bunpen

This commit is contained in:
2024-09-03 14:49:02 +00:00
parent ff763b44bc
commit 60d5dbda77

View File

@@ -2,7 +2,7 @@
{
sane.programs."sane-secrets-unlock" = {
packageUnwrapped = pkgs.sane-scripts.secrets-unlock;
sandbox.method = "bwrap";
sandbox.method = "bunpen";
sandbox.extraHomePaths = [
".ssh/id_ed25519"
".ssh/id_ed25519.pub"