sane-screenshot: sandbox with bunpen

This commit is contained in:
2024-09-03 14:57:29 +00:00
parent a2bfb23253
commit a2366ba9d4

View File

@@ -1,12 +1,14 @@
{ ... }: { ... }:
{ {
sane.programs.sane-screenshot = { sane.programs.sane-screenshot = {
sandbox.method = "bwrap"; sandbox.method = "bunpen";
sandbox.whitelistWayland = true; sandbox.whitelistWayland = true;
sandbox.whitelistDbus = [ "user" ]; #< to send notifications sandbox.whitelistDbus = [ "user" ]; #< to send notifications
sandbox.extraHomePaths = [ sandbox.extraHomePaths = [
"Pictures/Screenshots" "Pictures/Screenshots"
]; ];
sandbox.isolatePids = false; #< it's required (to copy to the clipboard), but unsure why
sandbox.extraPaths = [ "/proc" ]; #< for nested bwrap invocations
suggestedPrograms = [ suggestedPrograms = [
"libnotify" "libnotify"
"swappy" "swappy"