colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

iio-sensor-proxy: sandbox

Browse Source
This commit is contained in:
Colin 2024-07-04 19:27:16 +00:00
parent ca2ac89cec
commit 828d4fcc9c
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
hosts/common/programs/iio-sensor-proxy.nix
View File

@ -40,6 +40,14 @@ in
];
});
enableFor.system = lib.mkIf (builtins.any (en: en) (builtins.attrValues cfg.enableFor.user)) true; #< for dbus/polkit policies
sandbox.method = "bwrap";
sandbox.whitelistDbus = [ "system" ];
sandbox.extraPaths = [
"/run/udev/data"
"/sys/bus"
"/sys/devices"
];
};
services.udev.packages = lib.mkIf cfg.enabled [ cfg.package ];
# services.dbus.packages = lib.mkIf cfg.enabled [ cfg.package ]; #< for bus ownership policy