From 824dd7c1f51392849244b1dc076adbab2150b982 Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Fri, 16 Feb 2024 04:00:27 +0000
Subject: [PATCH] programs: endless-sky: sandbox with bwrap

---
 hosts/common/programs/assorted.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index f90248a8..af9a00a5 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -267,6 +267,11 @@ in
     dtc.sandbox.autodetectCliPaths = true;  # TODO:sandbox: untested
 
     endless-sky.persist.byStore.plaintext = [ ".local/share/endless-sky" ];
+    endless-sky.sandbox.method = "bwrap";
+    endless-sky.sandbox.wrapperType = "wrappedDerivation";
+    endless-sky.sandbox.whitelistAudio = true;
+    endless-sky.sandbox.whitelistDri = true;
+    endless-sky.sandbox.whitelistWayland = true;
 
     # `emote` will show a first-run dialog based on what's in this directory.
     # mostly, it just keeps a LRU of previously-used emotes to optimize display order.