colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: bridge-utils: sandbox

Browse Source
This commit is contained in:
Colin 2024-02-16 15:10:49 +00:00
parent 198029f95f
commit 8e314e8b73
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/common/programs/assorted.nix
View File

@ -242,6 +242,10 @@ in
"/sys/devices"
];
bridge-utils.sandbox.method = "landlock"; #< has to be in the same net namespace, at least.
bridge-utils.sandbox.wrapperType = "wrappedDerivation";
bridge-utils.sandbox.net = "all";
brightnessctl.sandbox.method = "landlock"; # also bwrap, but landlock is more responsive
brightnessctl.sandbox.wrapperType = "wrappedDerivation";
brightnessctl.sandbox.extraPaths = [