grim: sandbox with bunpen

2024-09-03 17:03:56 +00:00
parent 4856a46388
commit 775c1522ee
1 changed files with 2 additions and 1 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -746,7 +746,8 @@ in
    ];
    gptfdisk.sandbox.autodetectCliPaths = "existing";  #< sometimes you'll use gdisk on a device file.

-    grim.sandbox.method = "bwrap";
+    # N.B.: if the user doesn't specify an output path, `grim` will output to ~/Pictures (which isn't included in this sandbox)
+    grim.sandbox.method = "bunpen";
    grim.sandbox.autodetectCliPaths = "existingOrParent";
    grim.sandbox.whitelistWayland = true;