From 643a6e8309a53de4043e5a8ea3f7f4d35ec3ed1f Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Sat, 12 Oct 2024 22:44:17 +0000
Subject: [PATCH] neovim: fix sandboxing when run as sudo

---
 hosts/common/programs/neovim/default.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hosts/common/programs/neovim/default.nix b/hosts/common/programs/neovim/default.nix
index db7b984f7..b1db00370 100644
--- a/hosts/common/programs/neovim/default.nix
+++ b/hosts/common/programs/neovim/default.nix
@@ -54,6 +54,8 @@ in
       "tmp"
       # "use"
     ];
+    sandbox.tryKeepUsers = true;
+    sandbox.capabilities = [ "dac_override" ];
 
     packageUnwrapped = let
       configArgs = {