fontconfig: sandbox with bunpen

This commit is contained in:
2024-09-03 18:22:27 +00:00
parent 57637167b1
commit 986dc8c37a

View File

@@ -55,7 +55,7 @@ let
in in
{ {
sane.programs.fontconfig = { sane.programs.fontconfig = {
sandbox.method = "bwrap"; # TODO:sandbox: untested sandbox.method = "bunpen";
sandbox.autodetectCliPaths = "existingOrParent"; #< this might be overkill; or, how many programs reference fontconfig internally? sandbox.autodetectCliPaths = "existingOrParent"; #< this might be overkill; or, how many programs reference fontconfig internally?
# persist.byStore.plaintext = [ # persist.byStore.plaintext = [