where-am-i: sandbox

2024-07-04 12:35:09 +00:00 · 2024-07-04 12:35:09 +00:00 · 7084bf95fa
commit 7084bf95fa
parent acd0926d1f
1 changed files with 7 additions and 0 deletions
--- a/hosts/common/programs/where-am-i.nix
+++ b/hosts/common/programs/where-am-i.nix
@ -7,5 +7,12 @@
      name = "bin/where-am-i";
      path = "${config.sane.programs.geoclue2.packageUnwrapped}/libexec/geoclue-2.0/demos/where-am-i";
    }];
+
+    sandbox.method = "bwrap";
+    sandbox.net = "all";  # TODO: why does it require this? i think it just needs *some* net dev and any will do.
+    sandbox.whitelistDbus = [
+      "system"  # system is required for non-portal location services
+    ];
+    sandbox.usePortal = false;  # TODO: set up portal-based location services
  };
 }