colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

programs: jq: add working sandbox criteria, but don't enable yet

Browse Source 
i need to handle the extremely common `cat foo | jq .` without adding
`.` to the sandbox
This commit is contained in:
Colin 2024-02-17 15:36:41 +00:00
parent a273b559e2
commit a729f91d21
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
hosts/common/programs/assorted.nix
View File

@ -582,7 +582,9 @@ in
iw.sandbox.net = "all";
iw.sandbox.capabilities = [ "net_admin" ];
# jq.sandbox.autodetectCliPaths = true; # liable to over-detect
# jq.sandbox.method = "bwrap";
# jq.sandbox.wrapperType = "wrappedDerivation";
# jq.sandbox.autodetectCliPaths = true; # liable to over-detect, but how else to sandbox?
killall.sandbox.method = "landlock";
killall.sandbox.wrapperType = "wrappedDerivation";