programs: iputils: sandbox
This commit is contained in:
parent
4ced02b0b2
commit
784c2145f3
|
@ -531,11 +531,10 @@ in
|
||||||
iptables.sandbox.capabilities = [ "net_admin" ];
|
iptables.sandbox.capabilities = [ "net_admin" ];
|
||||||
|
|
||||||
# iputils provides `ping` (and arping, clockdiff, tracepath)
|
# iputils provides `ping` (and arping, clockdiff, tracepath)
|
||||||
# TODO: still being shadowed by non-sandboxed iputils
|
iputils.sandbox.method = "landlock";
|
||||||
# iputils.sandbox.method = "landlock";
|
iputils.sandbox.wrapperType = "wrappedDerivation";
|
||||||
# iputils.sandbox.wrapperType = "wrappedDerivation";
|
iputils.sandbox.net = "all";
|
||||||
# iputils.sandbox.net = "all";
|
iputils.sandbox.capabilities = [ "net_raw" ];
|
||||||
# iputils.sandbox.capabilities = [ "net_raw" ];
|
|
||||||
|
|
||||||
iw.sandbox.method = "landlock";
|
iw.sandbox.method = "landlock";
|
||||||
iw.sandbox.wrapperType = "wrappedDerivation";
|
iw.sandbox.wrapperType = "wrappedDerivation";
|
||||||
|
|
Loading…
Reference in New Issue
Block a user