programs: htop/iotop/iftop: sandbox
This commit is contained in:
parent
4e5e4219ec
commit
9d252d095e
|
@ -380,6 +380,24 @@ in
|
|||
hase.sandbox.whitelistDri = true;
|
||||
hase.sandbox.whitelistWayland = true;
|
||||
|
||||
htop.sandbox.method = "landlock";
|
||||
htop.sandbox.wrapperType = "wrappedDerivation";
|
||||
htop.sandbox.extraPaths = [
|
||||
"/proc"
|
||||
"/sys/devices"
|
||||
];
|
||||
|
||||
iftop.sandbox.method = "landlock";
|
||||
iftop.sandbox.wrapperType = "wrappedDerivation";
|
||||
iftop.sandbox.capabilities = [ "net_raw" ];
|
||||
|
||||
iotop.sandbox.method = "landlock";
|
||||
iotop.sandbox.wrapperType = "wrappedDerivation";
|
||||
iotop.sandbox.extraPaths = [
|
||||
"/proc"
|
||||
];
|
||||
iotop.sandbox.capabilities = [ "net_admin" ];
|
||||
|
||||
inkscape.sandbox.method = "bwrap";
|
||||
inkscape.sandbox.wrapperType = "wrappedDerivation";
|
||||
inkscape.sandbox.whitelistWayland = true;
|
||||
|
|
Loading…
Reference in New Issue
Block a user