programs: notejot: sandbox

2024-02-18 06:28:46 +00:00
parent bf352d184c
commit 8d0e3e0db3
1 changed files with 7 additions and 0 deletions
--- a/hosts/common/programs/notejot.nix
+++ b/hosts/common/programs/notejot.nix
@@ -1,6 +1,13 @@
 { ... }:
 {
  sane.programs.notejot = {
+    sandbox.method = "bwrap";
+    sandbox.wrapperType = "wrappedDerivation";
+    sandbox.whitelistWayland = true;
+    sandbox.extraHomePaths = [
+      ".config/dconf"  # else it can't persist notebooks
+    ];
+
    persist.byStore.private = [
      ".local/share/io.github.lainsce.Notejot"
    ];