programs: lemoa: sandbox

2024-02-16 05:32:22 +00:00
parent 3fd89ec91b
commit 94b4f78e39
1 changed files with 6 additions and 0 deletions
--- a/hosts/common/programs/lemoa.nix
+++ b/hosts/common/programs/lemoa.nix
@@ -1,6 +1,12 @@
 { ... }:
 {
  sane.programs.lemoa = {
+    sandbox.method = "bwrap";
+    sandbox.wrapperType = "wrappedDerivation";
+    sandbox.net = "clearnet";
+    sandbox.whitelistDbus = [ "user" ];  # for clicking links
+    sandbox.whitelistDri = true;
+    sandbox.whitelistWayland = true;
    # creds
    persist.byStore.private = [ ".local/share/io.github.lemmygtk.lemoa" ];
  };