programs: bemenu: sandbox with landlock

2024-02-05 18:41:52 +00:00
parent 23411ed973
commit a2decaff9c
1 changed files with 2 additions and 0 deletions
--- a/hosts/common/programs/bemenu.nix
+++ b/hosts/common/programs/bemenu.nix
@@ -87,6 +87,8 @@ let
 in
 {
  sane.programs.bemenu = {
+    sandbox.method = "landlock";
+    sandbox.wrapperType = "wrappedDerivation";
    packageUnwrapped = pkgs.bemenu.overrideAttrs (upstream: {
      nativeBuildInputs = (upstream.nativeBuildInputs or []) ++ [
        pkgs.makeWrapper