From 729d2a98097031c521c40890cbb431de1cbbe50c Mon Sep 17 00:00:00 2001 From: Colin Date: Fri, 16 Aug 2024 02:16:37 +0000 Subject: [PATCH] firefox: dont use inplace wrapper avoiding inplace wrapping gives me more leverage over what gets linked into the final runtime environment --- hosts/common/programs/firefox.nix | 1 - 1 file changed, 1 deletion(-) diff --git a/hosts/common/programs/firefox.nix b/hosts/common/programs/firefox.nix index 3d82912cf..a608189d6 100644 --- a/hosts/common/programs/firefox.nix +++ b/hosts/common/programs/firefox.nix @@ -271,7 +271,6 @@ in sane.programs.firefox = { inherit packageUnwrapped; sandbox.method = "bwrap"; # landlock works, but requires all of /proc to be linked - sandbox.wrapperType = "inplace"; # trivial package; cheap enough to wrap inplace sandbox.net = "all"; sandbox.whitelistAudio = true; sandbox.whitelistDbus = [ "user" ]; # mpris