objdump: sandbox

2024-07-04 19:00:14 +00:00
parent ae2eaa786c
commit 9a09faa9e4
1 changed files with 2 additions and 0 deletions
--- a/hosts/common/programs/objdump.nix
+++ b/hosts/common/programs/objdump.nix
@@ -4,5 +4,7 @@
    # binutils-unwrapped is like 80 MiB, just for this one binary;
    # dynamic linking means copying the binary doesn't reduce the closure much at all compared to just symlinking it.
    packageUnwrapped = pkgs.linkIntoOwnPackage pkgs.binutils-unwrapped "bin/objdump";
+    sandbox.method = "bwrap";
+    sandbox.autodetectCliPaths = "existingFile";
  };
 }