From 9a09faa9e40b8b0a3d9cfdbfd46d486b56847b0f Mon Sep 17 00:00:00 2001
From: Colin <colin@uninsane.org>
Date: Thu, 4 Jul 2024 19:00:14 +0000
Subject: [PATCH] objdump: sandbox

---
 hosts/common/programs/objdump.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hosts/common/programs/objdump.nix b/hosts/common/programs/objdump.nix
index dc8a22e06..759457db5 100644
--- a/hosts/common/programs/objdump.nix
+++ b/hosts/common/programs/objdump.nix
@@ -4,5 +4,7 @@
     # binutils-unwrapped is like 80 MiB, just for this one binary;
     # dynamic linking means copying the binary doesn't reduce the closure much at all compared to just symlinking it.
     packageUnwrapped = pkgs.linkIntoOwnPackage pkgs.binutils-unwrapped "bin/objdump";
+    sandbox.method = "bwrap";
+    sandbox.autodetectCliPaths = "existingFile";
   };
 }