programs: libnotify: sandbox with bwrap

2024-02-14 13:49:48 +00:00 · 2024-02-14 13:49:48 +00:00 · 95f7eeeb5c
commit 95f7eeeb5c
parent 29d638c68b
1 changed files with 4 additions and 0 deletions
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@ -381,6 +381,10 @@ in
      "tmp"
    ];

+    libnotify.sandbox.method = "bwrap";
+    libnotify.sandbox.wrapperType = "wrappedDerivation";
+    libnotify.sandbox.whitelistDbus = [ "user" ];  # notify-send
+
    mercurial.sandbox.method = "bwrap";  # TODO:sandbox: untested
    mercurial.sandbox.wrapperType = "wrappedDerivation";
    mercurial.sandbox.net = "clearnet";