colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: w3m: enable sandbox

Browse Source
This commit is contained in:
Colin 2024-02-15 18:24:37 +00:00
parent b7c1a6331d
commit 7eaffc9fa0
1 changed files with 19 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
hosts/common/programs/assorted.nix
View File

@ -552,8 +552,27 @@ in
wget.sandbox.net = "all";
wget.sandbox.whitelistPwd = true; # saves to pwd by default
w3m.sandbox.method = "bwrap";
w3m.sandbox.wrapperType = "wrappedDerivation";
w3m.sandbox.net = "all";
w3m.sandbox.extraHomePaths = [
# little-used feature, but you can save web pages :)
"tmp"
];
whalebird.persist.byStore.private = [ ".config/Whalebird" ];
# TODO: these live in /libexec
# xdg-desktop-portal-gtk.sandbox.method = "bwrap";
# xdg-desktop-portal-gtk.sandbox.wrapperType = "inplace";
# xdg-desktop-portal-gtk.sandbox.whitelistDbus = [ "user" ]; # speak to main xdg-desktop-portal
# xdg-desktop-portal-gtk.sandbox.whitelistWayland = true;
# xdg-desktop-portal-wlr.sandbox.method = "bwrap"; # TODO:sandbox: untested
# xdg-desktop-portal-wlr.sandbox.wrapperType = "inplace";
# xdg-desktop-portal-wlr.sandbox.whitelistDbus = [ "user" ]; # speak to main xdg-desktop-portal
# xdg-desktop-portal-wlr.sandbox.whitelistWayland = true;
xdg-terminal-exec.sandbox.enable = false; # xdg-terminal-exec is a launcher for $TERM
xterm.sandbox.enable = false; # need to be able to do everything