From 62cbc65f12664685c7af3130e0be3051d3d16ae1 Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Thu, 7 Mar 2024 23:24:33 +0000
Subject: [PATCH] epiphany: fix sandboxing

---
 hosts/common/programs/epiphany.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hosts/common/programs/epiphany.nix b/hosts/common/programs/epiphany.nix
index a88693cb..943d452a 100644
--- a/hosts/common/programs/epiphany.nix
+++ b/hosts/common/programs/epiphany.nix
@@ -12,11 +12,13 @@
     sandbox.wrapperType = "inplace";  # /share/epiphany/default-bookmarks.rdf refers back to /share; dbus files to /libexec
     sandbox.net = "clearnet";
     sandbox.whitelistAudio = true;
+    sandbox.whitelistDbus = [ "user" ];  #< silently fails to start without it.
     # default sandboxing breaks rendering in weird ways. sites are super zoomed in / not scaled.
     # enabling DRI/DRM (as below) seems to fix that.
     sandbox.whitelistDri = true;
     sandbox.whitelistWayland = true;
     sandbox.extraHomePaths = [
+      ".config/dconf"  # else will always prompt "make default browser?"
       ".config/epiphany"  #< else it gets angry at launch
       "tmp"
     ];