diff --git a/hosts/common/programs/assorted.nix b/hosts/common/programs/assorted.nix
index 0b9303c16..e73a76b6c 100644
--- a/hosts/common/programs/assorted.nix
+++ b/hosts/common/programs/assorted.nix
@@ -928,7 +928,11 @@ in
     # e.g. `picocom -b 115200 /dev/ttyUSB0`
     picocom.sandbox.autodetectCliPaths = "existingFile";
 
-    powersupply.sandbox.method = null;  #< TODO: sandbox
+    powersupply.sandbox.whitelistWayland = true;
+    powersupply.sandbox.extraPaths = [
+      "/sys/class/power_supply"
+      "/sys/devices"
+    ];
 
     powertop.sandbox.capabilities = [ "ipc_lock" "sys_admin" ];
     powertop.sandbox.tryKeepUsers = true;