string: sandbox with bunpen

2024-09-03 03:37:31 +00:00
parent a163a260fa
commit 71be891c85
1 changed files with 1 additions and 1 deletions
--- a/hosts/common/programs/strings.nix
+++ b/hosts/common/programs/strings.nix
@@ -5,7 +5,7 @@
    # dynamic linking means copying the binary doesn't reduce the closure much at all compared to just symlinking it.
    packageUnwrapped = pkgs.linkBinIntoOwnPackage pkgs.binutils-unwrapped "strings";

-    sandbox.method = "landlock";
+    sandbox.method = "bunpen";
    sandbox.wrapperType = "inplace";  # trivial package; cheaper to wrap in place
    sandbox.autodetectCliPaths = "existing";
  };