firefox: dont use inplace wrapper

avoiding inplace wrapping gives me more leverage over what gets linked into the final runtime environment
This commit is contained in:
2024-08-16 02:16:37 +00:00
parent a552ed625b
commit 729d2a9809

View File

@@ -271,7 +271,6 @@ in
sane.programs.firefox = {
inherit packageUnwrapped;
sandbox.method = "bwrap"; # landlock works, but requires all of /proc to be linked
sandbox.wrapperType = "inplace"; # trivial package; cheap enough to wrap inplace
sandbox.net = "all";
sandbox.whitelistAudio = true;
sandbox.whitelistDbus = [ "user" ]; # mpris