modules/programs: sandbox: add "capshonly" as a valid sandbox.method
This commit is contained in:
@@ -216,7 +216,7 @@ let
|
|||||||
'';
|
'';
|
||||||
};
|
};
|
||||||
sandbox.method = mkOption {
|
sandbox.method = mkOption {
|
||||||
type = types.nullOr (types.enum [ "bwrap" "firejail" "landlock" ]);
|
type = types.nullOr (types.enum [ "bwrap" "capshonly" "firejail" "landlock" ]);
|
||||||
default = null; #< TODO: default to something non-null
|
default = null; #< TODO: default to something non-null
|
||||||
description = ''
|
description = ''
|
||||||
how/whether to sandbox all binaries in the package.
|
how/whether to sandbox all binaries in the package.
|
||||||
|
Reference in New Issue
Block a user